deps-audit

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local commands npm audit and npm outdated to perform its primary function.
  • [COMMAND_EXECUTION]: To check for unused dependencies, the skill utilizes grep on the project's source directory (src/).
  • [COMMAND_EXECUTION]: The error handling logic suggests running npm install to generate a lockfile if one is missing, which is a standard procedure in Node.js environments but involves executing package lifecycle scripts.
  • [COMMAND_EXECUTION]: The skill instructs the agent to report findings from npm audit including CVEs and fix commands like npm audit fix --force which modifies the local dependency tree.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 01:04 AM
Security Audit — agent-trust-hub — deps-audit