vulnerability-scanner
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or behaviors were identified. The skill's functionality is strictly aligned with its stated purpose as a security vulnerability scanner.
- [COMMAND_EXECUTION]: The "security_scan.py" script executes the "npm audit" command to check for known vulnerabilities in Node.js dependencies. This is a standard security practice and the command is invoked with a fixed set of arguments.
- [DATA_EXFILTRATION]: The skill performs local file analysis to search for secrets and dangerous code patterns. It does not contain any code for exfiltrating this data; findings are output locally to stdout in JSON format.
Audit Metadata