performing-ot-vulnerability-scanning-safely

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/agent.py utilizes the subprocess module to execute tshark and nmap for network discovery and vulnerability scanning. The command arguments are passed as lists rather than shell strings, which is a secure practice that mitigates the risk of command injection from user-supplied targets or interfaces.
  • [EXTERNAL_DOWNLOADS]: The orchestrator script in SKILL.md requires the requests library to communicate with the Tenable OT Security API. This is a standard and necessary dependency for the skill's documented functionality.
  • [DATA_EXPOSURE]: The orchestrator script uses a placeholder for an API key (your-api-key-here). This follows security best practices by not hardcoding sensitive credentials and instead instructing the user where to provide their own token.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:57 PM
Security Audit — agent-trust-hub — performing-ot-vulnerability-scanning-safely