security-analysis-skills
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource providing frameworks for STRIDE threat modeling and OWASP Top 10 risk mitigation. It contains no executable code or malicious instructions.
- [SAFE]: Code examples explicitly distinguish between vulnerable and secure patterns (e.g., parameterized queries vs. string concatenation) to guide the agent toward secure development practices.
- [SAFE]: External references point exclusively to trusted security organizations and documentation, including OWASP, NIST, MITRE, and Microsoft.
- [SAFE]: The use of sensitive keywords (e.g., API keys, passwords) occurs only within the context of negative examples demonstrating what to avoid and how to use environment variables or secrets managers correctly.
Audit Metadata