prioritizing-vulnerabilities-with-cvss-scoring

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves vulnerability data from established security APIs. scripts/agent.py and scripts/process.py fetch information from api.first.org, cisa.gov, and services.nvd.nist.gov. These are industry-standard resources for threat intelligence.
  • [COMMAND_EXECUTION]: The provided Python scripts perform CVSS calculations and data enrichment using the requests and pandas libraries. The code was reviewed for unsafe patterns such as arbitrary command execution or system-level tampering, and none were found.
  • [PROMPT_INJECTION]: The skill instructions and metadata do not contain any directives aimed at overriding safety guardrails or manipulating agent behavior.
  • [SAFE]: The skill is a legitimate tool for vulnerability management and risk assessment. It uses official data sources and standard libraries to perform its described functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 06:48 PM