Skills
skills/wyattowalsh/agents/skill-package-manifest-enricher/Gen Agent Trust Hub

skill-package-manifest-enricher

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/check.py invokes subprocess.run to execute validation utilities (validate_skill.py, validate_evals.py). These commands are constructed as lists of strings using paths derived programmatically from the script's own location, which prevents shell injection risks.
  • [SAFE]: The core logic in scripts/enrich_manifest.py handles manifest enrichment by reading SKILL.md and writing a structured manifest.enriched.json file. While the script accepts a user-provided name for the skill directory, the risk of path traversal is mitigated by the script's requirement for a valid SKILL.md containing specific frontmatter markers before any write operation occurs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 02:05 AM
Security Audit — agent-trust-hub — skill-package-manifest-enricher