env-and-assets-bootstrap — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

Gen Agent Trust Hub
pass
This skill automates the setup of research environments and identifies asset requirements (like datasets and checkpoints) by parsing repository files. It uses standard tools such as conda and pip to manage dependencies. The primary security consideration is its inherent susceptibility to indirect prompt injection when processing untrusted third-party repositories, which could influence the setup plan or installation steps.
Risk: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONMay 18, 2026Full report
Socket
pass
No alerts
May 18, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWMay 18, 2026Full report

env-and-assets-bootstrap — security audits

Passed all audits

Gen Agent Trust Hub
pass
This skill automates the setup of research environments and identifies asset requirements (like datasets and checkpoints) by parsing repository files. It uses standard tools such as conda and pip to manage dependencies. The primary security consideration is its inherent susceptibility to indirect prompt injection when processing untrusted third-party repositories, which could influence the setup plan or installation steps.
Risk: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONMay 18, 2026Full report
Socket
pass
No alerts
May 18, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWMay 18, 2026Full report