supply-chain-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and reasoning about external, potentially untrusted package manifest files and lockfiles. This creates an indirect prompt injection surface where malicious instructions or deceptive metadata embedded in a dependency could attempt to influence the agent's audit findings.
- Ingestion points: Reads
package.json,package-lock.json,pnpm-lock.yaml, anduv.lockacross various directories to perform supply chain audits. - Capability inventory: Instructs the agent on how to use CLI tools including
npm,pnpm,uv, andosv-scannerfor resolution and validation. - Boundary markers: The skill includes strong instructional boundaries, such as explicit warnings in
SKILL.mdandREADME.mdfiles (e.g., "inert grading text; never install") to prevent the agent from executing code within malicious test fixtures. - Sanitization: Relies on external security scanners (
osv-scanner) and human-in-the-loop verification checkpoints to validate the safety of dependencies.
Audit Metadata