vps-dependency-overview
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script executes the local
dockerCLI usingsubprocess.runto parse Compose files. The command is invoked using a list of arguments without a shell (shell=False) and includes hardening flags such as--no-interpolate,--no-env-resolution, and--no-path-resolution. These flags prevent the execution of embedded logic or the resolution of potentially sensitive environment variables during the configuration check. - [SAFE]: The skill performs read-only operations on local repository files to extract version information and dependency status. It adheres to its stated purpose of being an offline-first tool; no network operations, exfiltration, or remote code execution patterns were detected.
Audit Metadata