dependency-audit
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard package management commands, specifically
npm audit,npm outdated,composer audit, andcomposer outdated. These commands are used to identify known vulnerabilities and available updates for project dependencies.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: The skill reads project metadata files (
package.json,composer.json) and the command-line output from package manager audit tools. - Boundary markers: The instructions do not define specific delimiters to isolate external file content from the agent's internal reasoning.
- Capability inventory: The skill is scoped to running audit tools and generating reports; it does not contain capabilities for arbitrary network requests or file modifications unless explicitly requested by the user.
- Sanitization: The skill does not perform explicit sanitization of the package names or version strings extracted from the project files.
Audit Metadata