stix2-generator

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and command-line examples for generating STIX (Structured Threat Information eXpression) objects.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the standard stix2 Python package via pip install stix2, which is the official library for STIX 2 manipulation.
  • [COMMAND_EXECUTION]: The skill uses a local script scripts/generate_stix.py to perform data transformation. While this script is not provided in the snippet, the documented usage patterns are standard for a CLI utility. The script is expected to be present in the user's environment as part of the skill installation.
  • [DATA_EXPOSURE]: There is no evidence of hardcoded credentials or unauthorized data exfiltration. The skill processes local files provided by the user (e.g., --iocs FILE, --threat FILE) and outputs to a user-specified path (--output FILE).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 06:46 AM
Security Audit — agent-trust-hub — stix2-generator