ops-spacecraft-catalogue

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses uv run to execute a local Python script (manage_spacecraft.py). The script is part of the skill's own package and handles commands like lookup, list, and add. All operations are performed on local JSON files within the skill's directory.
  • [DATA_EXPOSURE]: The skill manages a catalogue of spacecraft data (names, IDs, aliases). This data is stored locally in spacecraft_catalogue.json (built-in) and custom_spacecraft.json (user-added). There is no code that transmits this data to external services or accesses sensitive system files.
  • [REMOTE_CODE_EXECUTION]: The manage_spacecraft.py script is a self-contained CLI that uses only the Python standard library. It does not perform any network operations, download external scripts, or use dynamic execution functions like eval() or exec() on untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:29 PM
Security Audit — agent-trust-hub — ops-spacecraft-catalogue