skills/mukul975/anthropic-cybersecurity-skills/scanning-container-images-with-grype/Gen Agent Trust Hub
scanning-container-images-with-grype
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions and scripts to download and execute installation procedures for Grype and Syft from Anchore's official GitHub organization. As these tools are from a well-known security technology vendor and are fundamental to the skill's purpose, they are documented neutrally and do not escalate the verdict.
- [COMMAND_EXECUTION]: The provided Python scripts (agent.py and process.py) utilize the subprocess module to interact with the Grype CLI. The implementation correctly uses argument lists for command execution, avoiding shell-based vulnerabilities, and the operations are consistent with standard vulnerability scanning workflows.
Audit Metadata