security-review
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate security resource containing educational content on hardening applications and preventing common vulnerabilities.
- [COMMAND_EXECUTION]: The skill includes a helper script (
scripts/validate-auth.sh) that uses shell commands likegrepto analyze local code. The script correctly implements input validation to prevent shell metacharacter injection in the target path. - [EXTERNAL_DOWNLOADS]: The documentation references well-known security tools and repositories, such as Snyk, Gitleaks, and pip-audit. These references are for configuration and dependency scanning purposes and target established, reputable services.
- [DATA_EXPOSURE]: The skill provides examples of secure secrets management and warns against hardcoding credentials. It does not contain or attempt to exfiltrate any sensitive data.
Audit Metadata