skills/mukul975/anthropic-cybersecurity-skills/scanning-containers-with-trivy-in-cicd/Gen Agent Trust Hub
scanning-containers-with-trivy-in-cicd
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified in the skill content or scripts.
- [COMMAND_EXECUTION]: The included scripts (
scripts/agent.pyandscripts/process.py) execute thetrivyCLI using thesubprocess.runmethod with argument lists. This implementation adheres to security best practices by avoiding shell execution, effectively preventing command injection risks. - [EXTERNAL_DOWNLOADS]: The skill references official and trusted resources, such as the
aquasecurity/trivy-actionand theaquasec/trivyDocker image, for vulnerability scanning. These components are documented neutrally as they originate from a well-known and reputable security vendor.
Audit Metadata