security-suite
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/security_suite.pyuses thesubprocessmodule to execute system utilities and user-provided binaries. - Evidence: Functions
_runandshutil_whichinvoke system tools such asfile,otool,ldd,strings,ps, andlsofto collect metadata and runtime traces. - Context: This execution is central to the skill's primary purpose as a security analysis tool and is performed within a designated sandbox directory structure.
- [PROMPT_INJECTION]: The skill includes a red-teaming component designed to detect prompt injection vulnerabilities in other repository files.
- Evidence:
references/agentops-redteam-pack.jsoncontains a collection of attack patterns used byscripts/prompt_redteam.pyto identify weaknesses in instruction precedence and context boundaries. - [SAFE]: No hardcoded credentials, unauthorized data exfiltration, or obfuscated malicious code were detected. The skill follows security best practices by providing machine-readable outputs and policy-based gating for CI/CD environments.
Audit Metadata