soia-safe-track-vulnerability-intel
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches vulnerability information from well-known authoritative security services, including the National Vulnerability Database (NVD), CISA's Known Exploited Vulnerabilities (KEV) catalog, and GitHub Security Advisories.
- [COMMAND_EXECUTION]: A local Python script (
scripts/collect_vulnerabilities.py) is used to automate data collection and deduplication. This script uses only standard libraries and implements restricted file permissions (0600) for output files to ensure data privacy. - [SAFE]: No malicious behavior, obfuscation, or persistence mechanisms were detected. The skill follows best practices for managing API keys through environment variables and clearly defines security boundaries regarding data privacy and minimal information sharing.
Audit Metadata