skill-registry-lock

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/check.py uses subprocess.run to execute local Python validation scripts (validate_skill.py and validate_evals.py). These calls utilize structured argument lists and avoid shell interpolation, which mitigates command injection risks and is appropriate for the skill's documented internal development purpose.
  • [SAFE]: No indicators of malicious activity, data exfiltration, or prompt injection were identified. The skill correctly identifies itself as a design placeholder and restricts its scope to local verification tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 02:05 AM
Security Audit — agent-trust-hub — skill-registry-lock