angular-package-manager

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines standard workflows for managing project dependencies using established package managers (npm, pnpm, yarn) and the Angular CLI (ng). It promotes security best practices such as using npm audit for vulnerability scanning and npm ci for reproducible builds from lockfiles.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data including package names, version strings from npm view, and reports from npm outdated. This is an expected operational surface for a package management skill and does not introduce malicious behavior. The instructions emphasize using official CLI tools which provide structured output, reducing risks associated with malformed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 02:24 PM