cwe-memory-safety
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Security Audit Framework: The skill defines a clear persona and objective for the agent to act as a code security reviewer. It includes detailed descriptions of 15 memory-related Common Weakness Enumerations (CWEs), which are standard industry references.
- Search Strategy and Guidelines: The instructions provide a systematic approach for scanning codebases, focusing on common vulnerability patterns while explicitly advising against proposing fixes to maintain an auditor's focus.
- Structured Output Format: It requires findings to be reported in a precise JSON schema, facilitating machine-readable results and consistent evidence reporting.
- No Risk Patterns Detected: Analysis of the skill body confirms the absence of prompt injection, unauthorized network access, hardcoded credentials, or obfuscated content. All instructions are transparent and aligned with the intended purpose of code auditing.
Audit Metadata