dependabot-alerts
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from package changelogs and release notes to determine the safety of version bumps.\n
- Ingestion points: Remote CHANGELOGs and release notes fetched during the vetting process (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions are provided to the subagent to ignore potentially malicious content within these external sources.\n
- Capability inventory: The skill can execute shell commands (
npm,gh,sf), modify the local repository, close GitHub PRs, and create records in internal systems (SKILL.md).\n - Sanitization: There is no mention of sanitizing or validating the content of the external changelogs before they are processed by the subagent or included in work item details.\n- [COMMAND_EXECUTION]: The skill uses local CLI tools (
npm,gh,sf) to perform its primary functions.\n - Evidence: Uses
gh apito fetch alerts,npm updateto modify dependencies, andsf data create recordto interact with internal work item tracking (SKILL.md).\n - Note: These operations are consistent with the skill's stated purpose and involve tools and repositories belonging to the vendor (forcedotcom).
Audit Metadata