sbom-software-composition
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains purely instructional content related to legal and technical analysis of software components.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were detected. References to external legal databases (e.g., gesetze-im-internet.de, dejure.org) are legitimate and standard for the described task.
- [PROMPT_INJECTION]: No patterns indicative of prompt injection, instruction overrides, or safety filter bypasses were found. The instructions emphasize verifying information against authoritative sources.
- [OBFUSCATION]: No obfuscated content, such as Base64, zero-width characters, or homoglyphs, was detected in the file.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code downloads or execution. It mentions technical entities like build systems and package managers only as subjects for the user's/agent's analysis.
Audit Metadata