get-available-resources

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.Popen with shell=False to execute a restricted set of read-only system management tools such as nvidia-smi, amd-smi, sysctl, and system_profiler. These calls are used exclusively for hardware inventory and resource limit detection.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests the optional installation of psutil from the official Python Package Index (PyPI) to provide more detailed physical core and memory telemetry. This is a well-known package from a trusted registry.
  • [DYNAMIC_EXECUTION]: The script scripts/detect_resources.py employs importlib.import_module to lazily load the optional psutil library. This is used for feature detection and does not involve executing code from untrusted or dynamic sources.
  • [SAFE]: The skill implements multiple defensive programming patterns to ensure safe operation:
  • File Safety: scripts/_common.py enforces strict file writing rules, including private permissions (0o600), prevention of symbolic link follows, and protection against directory traversal by restricting output to the current directory.
  • Privacy Redaction: The detection logic explicitly redacts sensitive information such as hostnames, absolute paths, device UUIDs, PCI addresses, and scheduler job IDs before outputting the JSON snapshot.
  • Resource Isolation: The safety contract prohibits stress tests, benchmarks, and driver mutations, ensuring the skill remains non-intrusive.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 12:10 PM