architecture-map-builder

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs static analysis of source code and configuration files (such as Dockerfiles and package manifests) within a user-provided directory. It uses only standard Python libraries (os, pathlib, re, json, collections) and does not install or use external dependencies.
  • [SAFE]: No network access or data exfiltration patterns were detected. The script reads from a local path and writes output files to a local directory without making any HTTP requests or external connections.
  • [SAFE]: No dangerous execution patterns such as eval(), exec(), or subprocess calls are present. The dependency detection logic relies on regular expression matching within file contents rather than executing the code.
  • [SAFE]: The skill does not access sensitive system directories or credentials. File operations are confined to the repository paths provided via command-line arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 06:27 PM
Security Audit — agent-trust-hub — architecture-map-builder