skill-registry-lock
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check.pyusessubprocess.runto execute local Python validation scripts (validate_skill.pyandvalidate_evals.py). These calls utilize structured argument lists and avoid shell interpolation, which mitigates command injection risks and is appropriate for the skill's documented internal development purpose. - [SAFE]: No indicators of malicious activity, data exfiltration, or prompt injection were identified. The skill correctly identifies itself as a design placeholder and restricts its scope to local verification tasks.
Audit Metadata