awesome-dependency-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly includes defensive instructions to mitigate indirect prompt injection. It instructs the agent to treat external content—such as changelogs, migration guides, and third-party code—strictly as untrusted data rather than instructions. This is a critical security best practice for agents that process external web content.
- [REMOTE_CODE_EXECUTION]: While the skill involves package installation and upgrades (which technically execute code from registries), it enforces best practices to minimize risk. It mandates using official package managers (npm, pip, cargo, etc.), requires pinning build-time executors by exact versions or commit SHAs, and enforces lockfile reviews to detect unexpected registry changes or malicious install scripts.
- [DATA_EXFILTRATION]: No evidence of unauthorized network operations or data exfiltration was found. The network activity is limited to standard package manager operations with official registries and fetching documentation from known sources.
- [COMMAND_EXECUTION]: The skill uses shell commands for project maintenance (e.g.,
git,npm,poetry). These operations are restricted to the primary purpose of the skill and are performed under a structured, batch-oriented workflow designed to allow easy reversion of any breaks.
Audit Metadata