skills/mukul975/anthropic-cybersecurity-skills/performing-nist-csf-maturity-assessment/Gen Agent Trust Hub
performing-nist-csf-maturity-assessment
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is implemented using only Python standard library modules, such as csv, json, and argparse, ensuring it can be audited and run without external dependencies.
- [DATA_EXFILTRATION]: Analysis of the source code in
scripts/agent.pyandscripts/process.pyconfirms that all file operations are local. No network-enabled libraries are imported, and no data is transmitted to external endpoints. - [EXTERNAL_DOWNLOADS]: The skill does not attempt to download external packages or remote code at runtime. Documentation references point to well-known official NIST resources for framework compliance.
- [COMMAND_EXECUTION]: The provided scripts allow for local data processing via the command line to generate maturity reports, which is consistent with the skill's stated purpose and does not involve unsafe shell execution.
- [REMOTE_CODE_EXECUTION]: No dangerous functions such as eval(), exec(), or os.system() are used in the code. Input handling is performed via standard libraries that sanitize data types for calculations.
Audit Metadata