skills/mukul975/anthropic-cybersecurity-skills/performing-ics-asset-discovery-with-claroty/Gen Agent Trust Hub
performing-ics-asset-discovery-with-claroty
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes authorized network requests to the user-configured Claroty xDome API and the official NIST National Vulnerability Database (services.nvd.nist.gov) to enrich asset metadata with security information. This is standard functionality for an asset discovery and risk assessment tool.\n- [SAFE]: All Python scripts within the skill (scripts/agent.py and embedded blocks in SKILL.md) follow secure coding practices. They use standard HTTP libraries (requests) for API interaction and restrict local file operations to reading and writing CSV reports as described in the documentation.\n- [SAFE]: The skill uses placeholders for sensitive information like API tokens and instance URLs, ensuring that no actual credentials are hardcoded. User-supplied input is handled via standard argument parsing (argparse) without any exposure to command injection or dynamic code execution vulnerabilities.
Audit Metadata