technical-skills
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A thorough review of all 14 files, including instructions, templates, and scripts, revealed no malicious patterns or security risks.
- [COMMAND_EXECUTION]: The skill includes local Python scripts (
scripts/validate.py,git-opensource/scripts/oss_health.py, andapis-sdks/scripts/sdk_validator.py) designed for structure validation and health reporting. These scripts use safe practices, such asyaml.safe_load(), and do not accept untrusted input for command execution. - [CREDENTIALS_UNSAFE]: All documentation and configuration examples utilize non-sensitive placeholders (e.g., 'sk_...', 'api_key="..."') for API keys and tokens. No hardcoded credentials or secrets were found.
- [DATA_EXFILTRATION]: The skill does not perform network operations or access sensitive system paths; no exfiltration vectors were identified.
Audit Metadata