check-exploit
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/multi-search.pyinteracts with the localsearchsploitutility. It uses thesubprocess.runmethod with arguments provided as a list, which is a security best practice that prevents shell injection attacks by ensuring user input is treated as data rather than executable shell commands. - [EXTERNAL_DOWNLOADS]: The script
scripts/cisa-kev-check.pyretrieves the Known Exploited Vulnerabilities (KEV) catalog from the official CISA website (www.cisa.gov). This is a recognized and trusted government resource for cybersecurity professionals, and the download is performed to provide the user with active exploitation data. - [SAFE]: No malicious patterns, such as prompt injection, obfuscated code, or unauthorized data exfiltration, were detected. The skill's operations are transparent and consistent with its stated purpose of assisting in vulnerability research.
Audit Metadata