windsurf-dependency-management

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from project files which could contain malicious instructions.
  • Ingestion points: Dependency manifest files such as package.json, requirements.txt, and configuration files like .npmrc as listed in references/directory-structure.md.
  • Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the processed files in SKILL.md or references/implementation.md.
  • Capability inventory: The skill is granted Bash(cmd:*), Read, Write, Edit, and Grep capabilities in the YAML frontmatter.
  • Sanitization: No evidence of sanitization, filtering, or validation of the external file content was found in the implementation guidelines.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash(cmd:*) tool to run commands such as npm audit. While this is the intended functionality for dependency management, it interacts directly with the data ingested from the project files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM
Security Audit — agent-trust-hub — windsurf-dependency-management