audit-catalyst-experimental-methods-rd
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python script
scripts/run_audit.pyto generate reports. This script uses only standard libraries and operates on user-provided text files. The execution is deterministic and restricted to a dedicated output directory with safeguards against symlink attacks and directory traversal. - [REMOTE_CODE_EXECUTION]: The skill explicitly prohibits installing external packages during execution and does not fetch or execute remote code. All logic is contained within the provided local scripts.
- [DATA_EXFILTRATION]: The skill processes experimental data locally. It includes instructions to retain material within the user's access rules and does not transmit data to external services without authorization.
- [PRIVILEGE_ESCALATION]: The execution environment is restricted to standard user permissions, and the scripts do not attempt to acquire elevated privileges (e.g., no
sudoor system-level modifications). - [SAFE]: The skill follows security best practices by validating output paths, avoiding symlinks, and using standard library components for document generation instead of potentially risky third-party dependencies.
Audit Metadata