dependency-check

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to verify the presence of tools (e.g., mcp__chrome-devtools__list_pages, npx claudish --version) and to check environment variables ($OPENROUTER_API_KEY). These are standard diagnostic checks.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for users to install tools via npm install -g claudeup@latest and npx chrome-devtools-mcp@latest. While these involve external downloads, they are presented as transparent setup instructions for the user to execute, and the tools referenced are relevant to the skill's stated purpose of UI debugging and development orchestration.
  • [DATA_EXPOSURE]: The skill mentions handling the OPENROUTER_API_KEY. It correctly advises users to set this via environment variables or a configuration tool (claudeup), which is a safe practice for credential management compared to hardcoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 08:18 PM
Security Audit — agent-trust-hub — dependency-check