light-patent-disclosure

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses a local validation script (scripts/disclosure_gate.py) to verify the integrity of invention disclosure materials. The script includes defensive checks against directory traversal and ensures that all referenced artifacts exist within the project scope using relative paths and SHA-256 verification.
  • [COMMAND_EXECUTION]: The workflow involves running a Python-based validation tool. This tool operates exclusively on local project data provided in the disclosure packet and does not use dangerous functions like eval() or exec(). It maintains a low-privilege profile and follows security best practices for file handling.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to official patent office resources and documentation from well-known organizations such as WIPO, CNIPA, USPTO, and EPO. These are used solely for procedural guidance and do not trigger automated downloads or remote code execution.
  • [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill focuses on preparing handoff packets for attorney review and specifically instructs the user on trade-secret redaction and keeping sensitive information local.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 01:44 AM
Security Audit — agent-trust-hub — light-patent-disclosure