migrating-to-post-quantum-cryptography

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Open Quantum Safe (OQS) libraries and providers from their official GitHub repositories. These are well-known resources in the cryptographic community for quantum-readiness research.\n- [COMMAND_EXECUTION]: The skill includes shell commands for building and installing software, including the use of sudo for system-wide library installation as part of the migration setup.\n- [COMMAND_EXECUTION]: The agent.py script executes the local openssl binary using subprocess.run to perform TLS negotiation tests. The implementation uses a list-based argument structure, which is a secure method for executing external processes.\n- [EXTERNAL_DOWNLOADS]: The skill references established software inventory tools such as cdxgen and cbomkit-theia for generating Cryptography Bill of Materials (CBOM).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 05:49 PM
Security Audit — agent-trust-hub — migrating-to-post-quantum-cryptography