sgc-install-ai

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were identified in the skill instructions or scripts. The workflow is focused on app integration and follows secure development practices.\n- [COMMAND_EXECUTION]: The skill includes a local validation utility (scripts/validate_skill.py) meant for developer use. The script uses standard Python libraries and secure methods, such as yaml.safe_load, to process local metadata files without network access.\n- [DATA_EXFILTRATION]: The skill documentation explicitly mandates that API keys and secrets must not be stored in skill profiles or source control. It directs the user and agent to use server-side management and environment variables to mitigate credential exposure risks.\n- [REMOTE_CODE_EXECUTION]: The skill does not contain any patterns for downloading or executing remote code from untrusted external sources. All referenced dependencies are standard and local.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:55 AM
Security Audit — agent-trust-hub — sgc-install-ai