dependency-vulnerability
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard, well-known security auditing tools like
npm audit,pip-audit,snyk, andgovulncheck. These are intended for the skill's primary purpose of dependency management. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install security utilities from official and trusted package registries including NPM, PyPI, and RubyGems.
- [DATA_EXPOSURE]: The skill accesses project manifests and lock files (e.g.,
package-lock.json,requirements.txt) to analyze dependencies for known vulnerabilities, which is standard behavior for this use case.
Audit Metadata