skills/mukul975/anthropic-cybersecurity-skills/building-vulnerability-dashboard-with-defectdojo/Gen Agent Trust Hub
building-vulnerability-dashboard-with-defectdojo
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones the official DefectDojo repository from GitHub (
https://github.com/DefectDojo/django-DefectDojo.git). This is a standard deployment procedure for this open-source tool. - [COMMAND_EXECUTION]: Provides instructions for standard Docker Compose operations and Python-based API automation. Commands are transparent and align with the skill's stated purpose of managing security findings.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external security scan data (Nessus, ZAP, Trivy, etc.) into the dashboard. While this is a data ingestion surface, the processing is performed by the DefectDojo application itself, which is designed for this specific purpose.
- [CREDENTIALS_SAFE]: The skill correctly uses environment variables and placeholders (e.g.,
<secure_password>,your_api_key_here) for database passwords and API tokens, discouraging the use of hardcoded secrets.
Audit Metadata