vulnerability-scanner

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious intent or security threats were identified. The skill performs its described function as a vulnerability scanner using transparent methods.\n- [COMMAND_EXECUTION]: The script scripts/security_scan.py utilizes the subprocess module to execute npm audit. This is a standard procedure for auditing the security of project dependencies.\n- [EXTERNAL_DOWNLOADS]: The use of npm audit within the scanning script involves reaching out to the official npm registry to fetch the latest vulnerability data, which is an expected and well-known service interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 01:34 AM