ai-supply-chain-bottleneck-hunter

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary logic in SKILL.md and its reference files is focused on supply chain research and industrial analysis, following a step-by-step methodology for finding capacity constraints.
  • [SAFE]: No hardcoded credentials, API keys, or sensitive local paths (such as SSH or AWS credentials) were identified in any of the 25 files provided.
  • [SAFE]: The Python utility scripts provided in the scripts/ directory perform local data transformation, JSON generation, and image creation. They do not exhibit suspicious behaviors such as making unauthorized network connections or using dynamic execution (eval/exec) on untrusted data.
  • [SAFE]: The skill implements a robust 'Evidence Ladder' and validation workflow that forces the categorization of information by reliability (Confirmed, Inferred, Weak). This serves as a significant mitigation against indirect prompt injection by ensuring external data is evaluated rather than blindly followed.
  • [SAFE]: The infographic generation script (scripts/generate_infographics.py) uses the standard Pillow library for image processing and does not contain any hidden or obfuscated payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 10:52 AM
Security Audit — agent-trust-hub — ai-supply-chain-bottleneck-hunter