ai-governance
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides a comprehensive framework for AI governance, focusing on methodological guidance and fillable templates.
- [COMMAND_EXECUTION]: The Python test files (scripts/test_governance_maturity.py and scripts/test_use_case_risk_tier.py) use the subprocess module to run the skill's own CLI scripts. This is part of the standard test suite to verify tool output and does not pose a security risk as it executes known local code using the current interpreter.
- [DYNAMIC_EXECUTION]: The test files use importlib to dynamically load local modules for unit testing. This implementation is limited to loading the skill's own scripts within the same directory and is a standard development practice.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing third-party data and use case details. The included Python scripts mitigate risks by performing strict validation of input data types and allowed values before processing, ensuring no unvalidated data is processed.
Audit Metadata