security-auditor
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as intended for security auditing and code review, following best practices for local analysis.- [COMMAND_EXECUTION]: The skill instructions and scripts use standard shell commands (grep, cat) and Python scripts to perform static analysis of the filesystem. All operations are localized and do not execute external code.- [DATA_EXFILTRATION]: The included find_secrets.py script is a diagnostic tool designed to help users identify hardcoded credentials in their own projects. It does not contain hardcoded secrets itself and does not exfiltrate any found data.- [REMOTE_CODE_EXECUTION]: There is no evidence of remote script execution, dynamic code loading from untrusted sources, or network-based attacks.
Audit Metadata