skills/mukul975/anthropic-cybersecurity-skills/performing-ot-vulnerability-scanning-safely/Gen Agent Trust Hub
performing-ot-vulnerability-scanning-safely
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/agent.pyutilizes thesubprocessmodule to executetsharkandnmapfor network discovery and vulnerability scanning. The command arguments are passed as lists rather than shell strings, which is a secure practice that mitigates the risk of command injection from user-supplied targets or interfaces. - [EXTERNAL_DOWNLOADS]: The orchestrator script in
SKILL.mdrequires therequestslibrary to communicate with the Tenable OT Security API. This is a standard and necessary dependency for the skill's documented functionality. - [DATA_EXPOSURE]: The orchestrator script uses a placeholder for an API key (
your-api-key-here). This follows security best practices by not hardcoding sensitive credentials and instead instructing the user where to provide their own token.
Audit Metadata