vulnerability-scanner

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or behaviors were identified. The skill's functionality is strictly aligned with its stated purpose as a security vulnerability scanner.
  • [COMMAND_EXECUTION]: The "security_scan.py" script executes the "npm audit" command to check for known vulnerabilities in Node.js dependencies. This is a standard security practice and the command is invoked with a fixed set of arguments.
  • [DATA_EXFILTRATION]: The skill performs local file analysis to search for secrets and dangerous code patterns. It does not contain any code for exfiltrating this data; findings are output locally to stdout in JSON format.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 06:05 AM
Security Audit — agent-trust-hub — vulnerability-scanner