mapping-suite

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local bash script (scripts/compile-combined.sh) to process analysis manifests and generate a combined HTML navigation page. This script uses standard system utilities such as find, sed, and base64 to operate on files within the project directory.
  • [COMMAND_EXECUTION]: The report generation script includes a fallback mechanism that executes a hardcoded Python script to parse YAML data if the yq utility is not available on the host system. This code is used for structured data extraction from local manifests.
  • [SAFE]: The skill is designed with a 'coach' model that explicitly avoids autonomous execution; it presents recommended commands to the user and requires manual approval and invocation for each step in the workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 04:47 PM
Security Audit — agent-trust-hub — mapping-suite