college-application

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Scripts such as create_assessment.py and create_admission_info.py use subprocess.run to open generated HTML files in the system's default browser for the user's convenience. This is limited to opening local files created by the skill.
  • [EXTERNAL_DOWNLOADS]: The tavily_search.py tool makes authorized network requests to the Tavily API to perform research on careers and majors as part of its core functionality.
  • [SAFE]: The skill relies entirely on the Python standard library and does not require any external packages, reducing supply chain risks.
  • [SAFE]: Data rendering in the HTML reports is handled with proper HTML escaping (via html.escape) to prevent injection vulnerabilities when displaying user-provided or research-based content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 03:26 AM
Security Audit — agent-trust-hub — college-application