stix2-generator
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and command-line examples for generating STIX (Structured Threat Information eXpression) objects.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the standard
stix2Python package viapip install stix2, which is the official library for STIX 2 manipulation. - [COMMAND_EXECUTION]: The skill uses a local script
scripts/generate_stix.pyto perform data transformation. While this script is not provided in the snippet, the documented usage patterns are standard for a CLI utility. The script is expected to be present in the user's environment as part of the skill installation. - [DATA_EXPOSURE]: There is no evidence of hardcoded credentials or unauthorized data exfiltration. The skill processes local files provided by the user (e.g.,
--iocs FILE,--threat FILE) and outputs to a user-specified path (--output FILE).
Audit Metadata