get-available-resources

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/detect_resources.py uses the subprocess module to run system utilities such as nvidia-smi, rocm-smi, sysctl, and system_profiler. These commands are used solely to gather hardware specifications and are implemented safely using argument lists to prevent shell injection.
  • [EXTERNAL_DOWNLOADS]: The skill requires the psutil Python package. This is a standard, reputable library used for system monitoring and resource detection.
  • [DATA_EXFILTRATION]: There are no network-related operations (e.g., requests, sockets, or curl) within the script. All detected resource information is written to a local file named .claude_resources.json for the agent's internal use.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 08:22 AM
Security Audit — agent-trust-hub — get-available-resources