open-source-compliance-audit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, providing a framework for identifying and auditing open-source software licenses (GPL, LGPL, MIT, etc.) without executing any code.
- [SAFE]: References to external websites are limited to official and well-known German legal resources such as gesetze-im-internet.de, dejure.org, and openJur for verifying statutory norms.
- [SAFE]: While the skill mentions development tools like npm, pip, and Maven, it does so in the context of identifying software dependencies rather than performing automated installations or remote script executions.
- [SAFE]: No evidence of obfuscation, malicious persistence, privilege escalation, or data exfiltration was found during the analysis.
Audit Metadata