soc2-audit
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strict read-only policy, ensuring that the repository being audited is never modified or staged for commits. All output is confined to a local 'reports/' directory.
- [SAFE]: The skill includes explicit instructions and shell commands to detect and redact sensitive information, such as AWS access keys and private key headers, ensuring that credentials are not leaked into audit artifacts or the final report.
- [COMMAND_EXECUTION]: The skill uses standard Unix utilities (grep, find, ls, sed) to perform pattern-based evidence gathering. These commands are transparent, local, and directly related to the audit functionality.
- [DATA_EXFILTRATION]: No network exfiltration patterns were detected. While 'WebFetch' is included in the allowed-tools list, the provided instructions do not utilize network tools to transmit audit data to external servers.
Audit Metadata