malware-detection-and-reporting
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any malicious patterns, obfuscation, or unauthorized access attempts. All analyzed code snippets are transparent and intended for educational or security reporting purposes.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill references the use of a
GITHUB_TOKENenvironment variable for authenticating with the GitHub API. This is a standard and recommended practice for secret management in development tools. The network operations targetapi.github.com, which is a well-known and trusted service, and no sensitive local files are accessed or transmitted. - [INDIRECT_PROMPT_INJECTION]: The skill includes functions designed to ingest external data such as repository descriptions, topics, and README content for analysis.
- Ingestion points: Analyzed in the
AnalyzeRepositoryandScanRepositoryContentfunctions withinSKILL.md. - Boundary markers: The skill uses hardcoded string matching and regular expressions to evaluate input, providing a clear boundary for data processing.
- Capability inventory: The skill possesses no dangerous capabilities such as file system writing, subprocess execution, or arbitrary network exfiltration based on the processed data.
- Sanitization: Input is normalized (lowercased) and compared against known malicious keywords/patterns. The surface is low-risk and appropriate for a security analysis tool.
Audit Metadata