skills/mukul975/anthropic-cybersecurity-skills/analyzing-sbom-for-supply-chain-vulnerabilities/Gen Agent Trust Hub
analyzing-sbom-for-supply-chain-vulnerabilities
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes standard commands to download and install security tools from official GitHub repositories, specifically for SBOM generation and vulnerability scanning.
- [REMOTE_CODE_EXECUTION]: The analysis script performs network requests to the official NIST National Vulnerability Database (NVD) 2.0 API to retrieve vulnerability data for software components.
- [COMMAND_EXECUTION]: The skill workflow involves the execution of local command-line utilities for processing SBOM files and calculating risk metrics, which is aligned with its stated security assessment purpose.
Audit Metadata