crypto-audit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a set of instructions for the agent to perform static analysis on source code. It uses pattern matching to identify cryptographic vulnerabilities such as weak algorithms (MD5/SHA1), hardcoded keys, and insecure random number generation. All code snippets provided are illustrative examples of 'UNSAFE' and 'SAFE' implementation patterns intended for remediation guidance rather than execution. The skill explicitly states it requires no external tools or installations, performing all checks via pure code inspection. No network exfiltration, persistence mechanisms, or unauthorized privilege escalations were detected. The hardcoded keys found in the documentation (e.g., 'mysecretkey12345') are generic placeholders used to demonstrate security risks and do not represent sensitive internal data.
Audit Metadata