skills/mukul975/anthropic-cybersecurity-skills/implementing-secret-scanning-with-gitleaks/Gen Agent Trust Hub
implementing-secret-scanning-with-gitleaks
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: In
scripts/agent.pyandscripts/process.py, thesubprocess.run()function is utilized to invoke the Gitleaks CLI tool. Commands are structured safely as lists without enablingshell=True, preventing command injection vectors. - [EXTERNAL_DOWNLOADS]:
SKILL.md,references/api-reference.md, andassets/template.mdcontain instructions for downloading the official Gitleaks binary and GitHub actions fromgithub.com/gitleaks/gitleaks. These links point directly to the official technology provider and represent safe, standard installation practices.
Audit Metadata