aicr-managing-openvex
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill documents the management of vulnerability findings using OpenVEX. The instructions focus on manual verification and updates to a static JSON file.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Grype binary from its official repository (anchore/grype). This is a well-known security source.
- [COMMAND_EXECUTION]: The shell commands documented, such as docker build and gh workflow run, are standard for CI/CD workflows and do not exhibit malicious behavior.
- [REMOTE_CODE_EXECUTION]: The skill describes downloading and running the Grype binary locally. Because the source is a well-known security vendor, this pattern is considered safe within the intended use-case.
Audit Metadata