dependency-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Syft installation script from Anchore's official GitHub repository.
- [REMOTE_CODE_EXECUTION]: Executes the Syft installation script via a shell pipe, which is the vendor's documented installation method.
- [COMMAND_EXECUTION]: Provides instructions for installing and running various security-focused command-line tools such as Snyk, pip-audit, and govulncheck.
- [SAFE]: The external sources, including GitHub repositories for OWASP and Anchore, are recognized and appropriate for the skill's stated goal of software dependency scanning.
Audit Metadata