skills/igbuend/grimbard/depscan/Gen Agent Trust Hub

depscan

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and usage examples for OWASP Depscan, an open-source security tool maintained by the OWASP Foundation for scanning project dependencies, generating SBOMs, and auditing licenses.
  • [EXTERNAL_DOWNLOADS]: The skill includes installation instructions for owasp-dep-scan and sarif-tools via standard package managers like pipx and docker. These references target official repositories of the OWASP Foundation, a well-known and trusted security organization.
  • [COMMAND_EXECUTION]: The skill defines various command-line examples using the Bash tool to perform security scans on local project directories. These operations are restricted to the intended purpose of dependency analysis and do not involve unauthorized system access or dangerous command injection patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:06 AM