skills/mukul975/anthropic-cybersecurity-skills/scanning-container-images-with-grype/Gen Agent Trust Hub
scanning-container-images-with-grype
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Documentation files
SKILL.mdandreferences/workflows.md, as well as an error string inscripts/agent.py, reference the official installation script for Anchore Grype from its public GitHub repository (https://raw.githubusercontent.com/anchore/grype/main/install.sh). This is a standard and neutral reference to a well-known container security tool. - [COMMAND_EXECUTION]: The Python utility scripts
scripts/agent.pyandscripts/process.pyexecute the localgrypebinary usingsubprocess.run(). The commands are invoked using list/array arguments without enabling shell execution (shell=True), which prevents command injection risks.
Audit Metadata