trivy
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent on how to use the
trivycommand-line utility to perform security audits. All commands follow standard, documented usage for scanning images and filesystems. - [EXTERNAL_DOWNLOADS]: Recommends installing the scanner via Homebrew (
brew install trivy), which is a well-known and trusted package management service. - [DATA_EXPOSURE]: While the skill includes a secret scanning capability (
--scanners secret), this is a primary feature of the tool intended for local auditing and does not involve exfiltrating discovered data.
Audit Metadata