Skill audit report
Wazuh Audit report.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
PASS100
16K GitHub stars
Stars/forks activity
PASS97
16K stars, 2.4K forks; issue activity unavailable in current metadata
Recent maintenance
INFO76
3mo since push
License clarity
WARN42
Unknown
README/SKILL.md completeness
PASS90
Metadata includes enough usage and workflow context
Dependency/runtime risk
INFO80
external package install surface
Install availability
PASS92
npx skills add wazuh/wazuh
Install command safety
PASS92
standard package or runtime install path
Permission surface
PASS86
filesystem or document access
Repository evidence
PASS86
https://github.com/wazuh/wazuh
Review status
PASS88
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add wazuh/wazuh
Repository
88
https://github.com/wazuh/wazuh
License
45
Unknown
Maintenance
76
3mo since push
AI review
88
Approved with no listed issues
README/SKILL.md completeness
90
Usable description available
Dependency risk
80
external package install surface
Install command safety
92
standard package or runtime install path
Permission surface
86
filesystem or document access
Stars/forks activity
97
16K stars, 2.4K forks; issue activity unavailable in current metadata
Adoption
88
16K GitHub stars
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Warnings
- License is unclear
- Financial research output is not financial advice; require human review before any live investment decision
- Financial research output is not financial advice; require human review before any live investment decision.
- License clarity: Unknown
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.