audit-better-result-dependents
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script uses
spawnSyncto execute common system utilities includinggit,npm,tar, andripgrep(rg). All commands are executed with structured argument arrays, which prevents shell-injection attacks. - [EXTERNAL_DOWNLOADS]: The skill fetches package metadata from the official npm registry (
registry.npmjs.org) and clones source code from GitHub repositories to perform audits. These are well-known services and the downloads are necessary for the skill's stated purpose of auditing external dependents. - [DATA_EXFILTRATION]: No evidence of sensitive data collection or exfiltration was found. Network activity is limited to fetching package information and source code from trusted repositories.
Audit Metadata