py-security

Pass

Audited by Gen Agent Trust Hub on Mar 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of documentation, security patterns, and educational code examples. No malicious instructions, obfuscation, or data exfiltration patterns were detected.
  • [COMMAND_EXECUTION]: The skill documents standard command-line usage for well-known security tools like bandit and ruff. These are used for local static analysis and do not pose a security risk in this context.
  • [EXTERNAL_DOWNLOADS]: Mentions standard, widely-used Python security and utility packages including bandit, ruff, psycopg2, argon2-cffi, and python-dotenv. These are well-known libraries in the Python ecosystem.
  • [DATA_EXPOSURE]: Provides explicit instructions on how to identify and remediate hardcoded secrets, promoting the use of environment variables and .gitignore to protect sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 2, 2026, 06:02 PM