deps-audit
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to perform its audit functions, including
npm audit,npm outdated,npm install, andgrep. While these are standard tools for dependency management, they provide a vector for command-related risks if the environment is not properly scoped. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it ingests and processes untrusted data from the local environment.
- Ingestion points: The agent reads the output of
npm auditandnpm outdated, as well as file content from thesrc/directory viagrep. - Boundary markers: The instructions do not define delimiters or specific warnings to ignore embedded instructions within the ingested data.
- Capability inventory: The skill has the capability to execute shell commands (
npm) and read local files. - Sanitization: There is no evidence of sanitization or filtering of the external content before it is processed by the agent.
Audit Metadata