dependency-governance
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines security best practices for dependency management, including rejection of trivial packages and mandatory auditing steps.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided package names as input for auditing. Analysis of this attack surface indicates no security risk due to the descriptive, non-executable nature of the instructions. 1. Ingestion points: Package names in audit commands. 2. Boundary markers: None. 3. Capability inventory: Recommends system audit tools. 4. Sanitization: Not specified.
Audit Metadata