audit-and-reduce-dependencies
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security defaults for package management. It mandates the use of the --ignore-scripts flag for all pnpm operations to prevent the execution of potentially malicious lifecycle scripts.
- [EXTERNAL_DOWNLOADS]: The skill queries the official npm registry (registry.npmjs.org) to perform a mandatory 72-hour freshness check on package versions. This is a well-known service used here for proactive supply-chain defense.
- [COMMAND_EXECUTION]: Execution of auditing tools like @e18e/cli, knip, and syncpack is performed via pnpm dlx with version pinning and script blocking enabled.
- [SAFE]: The skill is authored by a known technology organization and focuses on improving the security posture of the project by reducing its dependency footprint.
Audit Metadata