snyk
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
snykCLI via the official NPM registry usingnpm install -g snyk. - [COMMAND_EXECUTION]: The skill provides common CLI commands for authenticating and running security tests on dependencies and containers.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on external project data, which constitutes a potential attack surface for indirect instructions.
- Ingestion points: Local and remote source code, dependency manifest files, and container images.
- Boundary markers: None provided in the instruction set.
- Capability inventory: Shell command execution via the
snykCLI (snyk test,snyk fix,snyk container test). - Sanitization: The skill does not explicitly define sanitization for the output of the scans.
Audit Metadata