dependency-audit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from user-provided project files, including package manifests, lockfiles, environment configurations, and CI/CD pipelines.
- Ingestion points: The skill reads various configuration files such as
package.json,requirements.txt,.env, and GitHub Actions workflows. - Boundary markers: There are no explicit instructions to the agent to treat content within these files as data rather than instructions, potentially allowing a malicious project file to influence agent behavior.
- Capability inventory: The skill utilizes
Bash,Read,Write,Grep, andWebSearchtools to perform audits and research vulnerabilities. - Sanitization: The instructions do not specify sanitization or filtering for the external content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references and searches well-known, trusted security databases such as the GitHub Advisory Database and the National Vulnerability Database (NVD) to cross-reference package versions.
Audit Metadata