asset-inventory
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of legitimate administrative and security auditing scripts for IT asset management. No indicators of malicious intent, prompt injection, or obfuscation were found.
- [COMMAND_EXECUTION]: Provides shell scripts for AWS, Azure, and GCP resource discovery. These scripts use official CLI tools and implement security hardening measures such as
umask 077to protect output files andset -euo pipefailfor robust execution. - [DATA_EXFILTRATION]: Includes a Python reference script for synchronizing discovered data with a CMDB. The script enforces HTTPS for the destination endpoint and uses standard bearer tokens for authentication, ensuring data is transmitted securely to a user-defined destination.
- [CREDENTIALS_UNSAFE]: Analysis of all scripts and templates confirms the absence of hardcoded API keys, passwords, or credentials. The scripts are designed to use the ambient identity of the execution environment or user-supplied tokens.
Audit Metadata