Skills
skills/oimiragieo/agent-studio/medusa-security/Gen Agent Trust Hub

medusa-security

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the medusa CLI tool using spawnSync. Evidence in scripts/cli-wrapper.cjs shows that shell: false is explicitly set, preventing shell injection vulnerabilities. The arguments are passed as an array, ensuring they are not interpreted as shell commands. The execution targets the local environment where the agent is running to perform security scans.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 02:58 AM