hallucinated-packages-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as an educational resource describing the 'Hallucinated Packages Anti-Pattern'. It explains the risks of installing software dependencies suggested by AI models without verification and provides guidance on how to evaluate package reputation.\n- [SAFE]: All code snippets included are illustrative and clearly labeled. Examples marked as 'BAD' or 'VULNERABLE' demonstrate the danger of slopsquatting, while 'GOOD' or 'SECURE' examples demonstrate proper verification and usage of well-known, reputable libraries such as scikit-image and jsonwebtoken.\n- [EXTERNAL_DOWNLOADS]: The skill includes links to reputable security organizations and research papers (OWASP, MITRE, USENIX, and Socket.dev) and a reference to the 'Arcanum-Sec/sec-context' GitHub repository. These are documented for informational purposes and follow standard security research citation practices.
Audit Metadata