vulnerability-scanner
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious intent or security threats were identified. The skill performs its described function as a vulnerability scanner using transparent methods.\n- [COMMAND_EXECUTION]: The script
scripts/security_scan.pyutilizes thesubprocessmodule to executenpm audit. This is a standard procedure for auditing the security of project dependencies.\n- [EXTERNAL_DOWNLOADS]: The use ofnpm auditwithin the scanning script involves reaching out to the official npm registry to fetch the latest vulnerability data, which is an expected and well-known service interaction.
Audit Metadata