supply-chain-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill recommends upgrading npm using
sudo npm i -g npm@latest. This is a standard administrative operation for global package updates and is necessary for the security features described. - [COMMAND_EXECUTION]: The documentation provides a workflow involving the execution of a custom shell script (
hotpatch.sh) and manual execution of package lifecycle scripts. These are intended security auditing steps. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where the system processes untrusted external data (npm tarballs). Evidence chain: (1) Ingestion Point: npm package tarballs; (2) Boundary Markers: not specified in documentation; (3) Capability Inventory: file-read operations and sandboxed execution via
bwraporfirejail; (4) Sanitization: implementation details are not provided in the skill files.
Audit Metadata