reporting
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and supporting scripts confirms the implementation follows security best practices.
- Configuration Safety: The validation script in
scripts/validate.pyutilizesyaml.safe_load(), which is the recommended method for preventing arbitrary code execution during YAML parsing. - No Risky Operations: The skill does not perform network operations, access sensitive user directories (e.g., SSH keys or cloud credentials), or utilize dynamic code execution functions like
eval()orexec(). - Code Quality: The documentation in
references/PATTERNS.mdexplicitly encourages input validation and specific exception handling, which helps mitigate common coding vulnerabilities.
Audit Metadata