Skills
skills/wyattowalsh/agents/skill-token-budget-linter/Gen Agent Trust Hub

skill-token-budget-linter

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/check.py file uses subprocess.run to orchestrate various Python scripts (validate_skill.py, validate_evals.py, and lint_budget.py). These calls use sys.executable to ensure the same Python interpreter is used and point to local skill paths. This is a routine automation pattern for linter orchestration and does not involve user-controllable shell injection.
  • [SAFE]: The skill uses yaml.safe_load in scripts/lint_budget.py to parse SKILL.md frontmatter, following security best practices to avoid unsafe deserialization.
  • [SAFE]: File system operations are restricted to reading skill metadata and measuring line/character counts within the local repository scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 02:05 AM
Security Audit — agent-trust-hub — skill-token-budget-linter