depscan
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and usage examples for OWASP Depscan, an open-source security tool maintained by the OWASP Foundation for scanning project dependencies, generating SBOMs, and auditing licenses.
- [EXTERNAL_DOWNLOADS]: The skill includes installation instructions for
owasp-dep-scanandsarif-toolsvia standard package managers likepipxanddocker. These references target official repositories of the OWASP Foundation, a well-known and trusted security organization. - [COMMAND_EXECUTION]: The skill defines various command-line examples using the
Bashtool to perform security scans on local project directories. These operations are restricted to the intended purpose of dependency analysis and do not involve unauthorized system access or dangerous command injection patterns.
Audit Metadata