npm-git-install

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on providing decision-making guidance for Node.js package delivery, recommending secure practices like SHA-pinning and avoiding hardcoded secrets.
  • [SAFE]: External links point exclusively to official documentation for reputable and well-known services, including GitHub, npm, Yarn, Bun, and pnpm.
  • [SAFE]: The skill instructions include clear warnings against security risks such as credential exposure and non-reproducible dependency references.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 01:51 PM
Security Audit — agent-trust-hub — npm-git-install