Skills
Navigate
skills/mukul975/anthropic-cybersecurity-skills/generating-and-analyzing-sboms/Gen Agent Trust Hub

generating-and-analyzing-sboms

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/agent.py executes system commands to interact with SBOM tools.
  • Evidence: Uses subprocess.run to call syft, grype, and cosign based on user-provided arguments in a controlled manner.
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from official external repositories for tool installation.
  • Evidence: Setup commands download installation scripts from the official Anchore GitHub organization.
  • [REMOTE_CODE_EXECUTION]: The skill includes setup procedures for installing security utilities from official sources.
  • Evidence: SKILL.md contains installation commands that download and execute shell scripts from the official repositories of the Syft and Grype projects.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 07:28 AM
Security Audit — agent-trust-hub — generating-and-analyzing-sboms