supply-chain-security

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [Defensive Credential Handling]: The skill mandates that all credential access must route through a dedicated AuthResolver and explicitly prohibits the use of raw environment variable reads for tokens, which helps prevent accidental credential leakage.
  • [Path Security Enforcement]: It requires all file path constructions to use a specific security utility, effectively mitigating the risk of directory traversal attacks by preventing ad-hoc path manipulation.
  • [Safe File Deletion Gates]: The skill implements a centralized deletion chokepoint with multiple safety gates, ensuring that file cleanup operations are controlled and less prone to accidental data loss or unauthorized deletion.
  • [Integrity Verification]: By enforcing a 'fail closed' policy for integrity and signature checks, the skill ensures that the system refuses to proceed if security verification cannot be confirmed, aligning with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 11:11 AM