prioritizing-vulnerabilities-with-cvss-scoring

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's scripts (agent.py and process.py) fetch vulnerability metadata, exploit probabilities, and catalog data from trusted security organizations including the National Vulnerability Database (NVD), CISA, and FIRST.org. These network operations are intrinsic to the skill's function and target well-known, legitimate infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted vulnerability descriptions from external APIs. This ingestion is low-risk as the data is used only for display and quantitative scoring, with no flow into dangerous execution sinks (subprocess, eval, or file-writing).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:33 AM