tgravity-work-mcn-collaboration
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local Python script
scripts/render_mcn_asset.pyto generate collaboration record skeletons from a bundled template. The script uses standard libraries and performs atomic file writes to a dedicated data directory. - [DATA_EXPOSURE]: A privacy policy is defined in
references/privacy-boundary.md, which provides clear instructions to the agent to keep sensitive information (like private contacts and internal pricing) out of exports. This is a positive security practice. - [COMMAND_EXECUTION]: Execution of the bundled Python script is restricted to rendering metadata fields into a template. The script includes a security check to prevent writing files back into the skill's own directory, enforcing a clear boundary between the skill package and user data.
Audit Metadata