Skills
skills/senpi-ai/senpi-skills/grizzly-horribilis-strategy/Gen Agent Trust Hub

grizzly-horribilis-strategy

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/grizzly_config.py file uses subprocess.run to interact with the mcporter CLI tool. This is a standard mechanism for platform integration. The implementation uses a list-based argument structure rather than shell execution, which is a secure practice that prevents command injection.
  • [EXTERNAL_DOWNLOADS]: The installation instructions in README.md describe fetching configuration and script files from the vendor's GitHub repository (github.com/Senpi-ai/senpi-skills). These downloads are consistent with the skill's stated source and vendor identity.
  • [SAFE]: No sensitive information is hardcoded; the skill correctly instructs users to manage secrets via environment variables or configuration files. No persistence mechanisms or obfuscated code patterns were identified during analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 07:34 AM