asset-inventory

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of legitimate administrative and security auditing scripts for IT asset management. No indicators of malicious intent, prompt injection, or obfuscation were found.
  • [COMMAND_EXECUTION]: Provides shell scripts for AWS, Azure, and GCP resource discovery. These scripts use official CLI tools and implement security hardening measures such as umask 077 to protect output files and set -euo pipefail for robust execution.
  • [DATA_EXFILTRATION]: Includes a Python reference script for synchronizing discovered data with a CMDB. The script enforces HTTPS for the destination endpoint and uses standard bearer tokens for authentication, ensuring data is transmitted securely to a user-defined destination.
  • [CREDENTIALS_UNSAFE]: Analysis of all scripts and templates confirms the absence of hardcoded API keys, passwords, or credentials. The scripts are designed to use the ambient identity of the execution environment or user-supplied tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 03:22 PM