performing-cloud-asset-inventory-with-cartography

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate security auditing functionality based on well-known CNCF projects. The implementation follows best practices for infrastructure assessment tools.
  • [EXTERNAL_DOWNLOADS]: The skill references established software packages including cartography, neo4j, and boto3, as well as official container images from the GitHub Container Registry.
  • [COMMAND_EXECUTION]: Documentation and scripts utilize standard CLI commands for container management and tool execution. No arbitrary command injection or malicious execution patterns were found.
  • [DATA_EXFILTRATION]: Network activity in the provided scripts is restricted to user-defined scanning targets. No evidence of hardcoded credentials or unauthorized data transmission was observed.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 09:38 PM