dependency-mapping
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes a setup script and an AST analysis tool from a computed directory path relative to the skill's location. This is used to initialize the migration environment and perform the audit.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from
package.jsonfiles to perform dependency mapping. - Ingestion points: Path to the local
package.jsonfile provided by the agent/user. - Boundary markers: None explicitly defined in the shell execution commands.
- Capability inventory: Shell script execution, file system writes to a
.migrationdirectory, and running external TypeScript analysis tools. - Sanitization: Not explicitly present in the skill markdown instructions.
- [COMMAND_EXECUTION]: The skill provides templates and instructions for the agent to generate and execute package manager commands such as
npm installandnpm uninstallto manage project dependencies.
Audit Metadata