Skills
skills/alirezarezvani/claude-skills/engineering-advanced-skills/Gen Agent Trust Hub

engineering-advanced-skills

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: The file tech-debt-tracker/assets/sample_codebase/src/payment_processor.py contains hardcoded test keys for Stripe (sk_test_1234567890), PayPal, and Square. Similarly, tech-debt-tracker/assets/sample_codebase/src/frontend.js contains a placeholder API key. These files are part of an assets directory intended to serve as test data for the technical debt scanner.
  • [COMMAND_EXECUTION]: Scripts such as changelog-generator/scripts/commit_linter.py and changelog-generator/scripts/generate_changelog.py use subprocess.run to execute git log commands. The commands use list arguments, which is a safe practice that prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: Reference materials and code examples in the release-manager and dependency-auditor directories demonstrate using the requests library to fetch data from the GitHub API (api.github.com). This is standard functionality for release management and auditing tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 05:26 PM