dependency-updater

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard CLI-based package management tools (such as npm, pip, go, cargo, mvn, and dotnet) to perform its core functions of scanning and updating dependencies.\n- [EXTERNAL_DOWNLOADS]: Recommends the installation and use of established third-party utilities like taze, pip-review, and cargo-audit from official package registries to facilitate advanced dependency analysis.\n- [COMMAND_EXECUTION]: Provides utility scripts and instructions for performing environment maintenance, such as 'nuclear' resets of package directories (e.g., node_modules) and virtual environments to resolve corruption issues.\n- [DATA_EXFILTRATION]: Accesses project manifest files (e.g., package.json, Cargo.toml) locally to detect outdated versions and vulnerabilities. This data is handled by standard auditing tools and is not transmitted to unauthorized destinations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:56 PM