apex
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a robust multi-agent architecture where a "Critique" agent specifically enforces security and governance rules before any code is finalized.
- [COMMAND_EXECUTION]: Internal tools and validation scripts are executed via standard Node.js and Python process spawning methods. The arguments are handled safely (using arrays rather than shell strings), and the tools being run are local to the package. The static analysis hint regarding
subprocess.run()is a benign invocation of an internal tool with constant arguments. - [SAFE]: Hardcoded security policies ensure that generated applications follow defensive coding practices, such as preventing public access by default and enforcing session state protection (SSP) on page items.
- [SAFE]: The skill integrates with the local Oracle environment for authoritative metadata validation, ensuring high fidelity and safety for generated database queries and processes.
Audit Metadata