Skills
Navigate
skills/g1joshi/agent-skills/dependabot/Gen Agent Trust Hub

dependabot

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely instructional, providing guidance on how to configure .github/dependabot.yml for dependency management.
  • [CREDENTIALS_UNSAFE]: The documentation references ${{ secrets.DEPENDABOT_NPM_TOKEN }} as a placeholder for GitHub Secrets. This is a standard and recommended practice for secret management in CI/CD environments and does not constitute a hardcoded credential finding.
  • [EXTERNAL_DOWNLOADS]: The skill references official GitHub documentation which is a trusted source.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 03:36 AM