dependency-map
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard project management utility designed to implement the Critical Path Method (CPM) for multi-team coordination.
- [COMMAND_EXECUTION]: The provided script,
scripts/dependency_graph.py, uses only Python standard libraries (argparse,json,sys,collections,datetime). It does not invoke shell commands, subprocesses, or external binaries. - [DATA_EXFILTRATION]: The skill does not perform any network operations. Data processing is restricted to reading a local JSON file and writing formatted text to standard output or a local file path. No access to sensitive credentials or configuration directories (e.g.,
.ssh,.aws) was found. - [INDIRECT_PROMPT_INJECTION]: The script ingests project data from a user-specified JSON file. While this constitutes a data ingestion surface, the tool is a focused analytical utility. It includes sanitization for Mermaid node identifiers and restricts processing to defined JSON fields. No instruction-override patterns were detected in the templates or logic.
- [OBFUSCATION]: The skill and its accompanying Python script contain no obfuscated content, encoded strings, or hidden logic. The code is transparent and follows standard development practices.
Audit Metadata