weekly-npm-dependency-audit
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard npm commands (
npm outdatedandnpm audit) to retrieve dependency information. These operations are limited to read-only audits and do not modify the system or project files unless explicitly requested by the user separately. - [DATA_EXFILTRATION]: No sensitive data access or external exfiltration was detected. The
npm auditcommand communicates with the official npm registry, which is standard behavior for this tool. - [PROMPT_INJECTION]: The instructions contain self-imposed constraints (guardrails) to ensure audit integrity. There are no attempts to bypass safety filters or override agent behavior maliciously.
- [EXTERNAL_DOWNLOADS]: The skill does not download external scripts or packages. It relies on the environment's pre-existing npm installation.
Audit Metadata