get-available-resources
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popenwithshell=Falseto execute a restricted set of read-only system management tools such asnvidia-smi,amd-smi,sysctl, andsystem_profiler. These calls are used exclusively for hardware inventory and resource limit detection. - [EXTERNAL_DOWNLOADS]: The documentation suggests the optional installation of
psutilfrom the official Python Package Index (PyPI) to provide more detailed physical core and memory telemetry. This is a well-known package from a trusted registry. - [DYNAMIC_EXECUTION]: The script
scripts/detect_resources.pyemploysimportlib.import_moduleto lazily load the optionalpsutillibrary. This is used for feature detection and does not involve executing code from untrusted or dynamic sources. - [SAFE]: The skill implements multiple defensive programming patterns to ensure safe operation:
- File Safety:
scripts/_common.pyenforces strict file writing rules, including private permissions (0o600), prevention of symbolic link follows, and protection against directory traversal by restricting output to the current directory. - Privacy Redaction: The detection logic explicitly redacts sensitive information such as hostnames, absolute paths, device UUIDs, PCI addresses, and scheduler job IDs before outputting the JSON snapshot.
- Resource Isolation: The safety contract prohibits stress tests, benchmarks, and driver mutations, ensuring the skill remains non-intrusive.
Audit Metadata