soc2-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a documentation-based framework for SOC 2 compliance readiness. Its primary function is to provide checklists and automation scripts that query cloud and version control APIs for security artifacts.
- [COMMAND_EXECUTION]: The skill includes a shell script (
collect-soc2-evidence.sh) and a GitHub Actions workflow that utilize standard CLI tools such as the AWS CLI and GitHub CLI (gh). These commands are designed to fetch configuration data (e.g.,aws iam generate-credential-report,gh api) for audit purposes and do not exhibit malicious behavior. - [EXTERNAL_DOWNLOADS]: The skill references a community GitHub repository (
BagelHole/DevOps-Security-Agent-Skills) for its source code and license. These are standard references to external documentation and do not involve the execution of untrusted remote code.
Audit Metadata