angular-package-manager
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines standard workflows for managing project dependencies using established package managers (npm, pnpm, yarn) and the Angular CLI (
ng). It promotes security best practices such as usingnpm auditfor vulnerability scanning andnpm cifor reproducible builds from lockfiles. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data including package names, version strings from
npm view, and reports fromnpm outdated. This is an expected operational surface for a package management skill and does not introduce malicious behavior. The instructions emphasize using official CLI tools which provide structured output, reducing risks associated with malformed data.
Audit Metadata