security-review
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely documentation-based, consisting of markdown files that provide guidelines, checklists, and examples for security auditing. It does not perform any network operations, data exfiltration, or unauthorized file access.
- [SAFE]: Automated detection of
eval,exec, and reverse shell patterns are confirmed false positives. These patterns appear in the documentation (e.g., SKILL.md, references/supply-chain.md, and languages/python.md) as examples of vulnerabilities the agent should identify in target code, not as instructions for the agent to execute. - [SAFE]: The skill reinforces safety by providing an 'Adversarial Reasoning Framework' and 'Review Process' that emphasizes high-confidence reporting and understanding the broader codebase context (e.g., framework mitigations and server-controlled values) before flagging issues.
- [SAFE]: All external references point to trusted community resources, primarily the OWASP Cheat Sheet Series, providing legitimate and high-quality educational content for the agent.
- [SAFE]: No hardcoded secrets or credentials were found. Examples of API keys or passwords in the documentation use common placeholders and clear labels marking them as vulnerable patterns.
Audit Metadata