ln-32-dependency-upgrader
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that processes content from external, untrusted sources, which could be used to host malicious instructions.
- Ingestion points: The skill reads external manifests, lockfiles, central version files, registry metadata, release notes, and migration guides as specified in the 'Tool Routing' and 'Checklist' sections of SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' markers for the text ingested from external changelogs or documentation.
- Capability inventory: The skill has the capability to modify manifest files, perform network requests to package registries, and execute repository-defined shell commands (build, lint, test) and native package manager commands (npm, pip, yarn).
- Sanitization: There is no evidence of sanitization or filtering logic for the textual content retrieved from external release notes or registry metadata.
- [COMMAND_EXECUTION]: The skill is configured to execute shell commands for dependency management and project verification.
- Evidence: The 'Tool Routing' table and Section 4 ('Verify and Keep or Revert') of the checklist detail the execution of native package-manager commands and repository-defined scripts for building, linting, and testing.
- [EXTERNAL_DOWNLOADS]: The skill interacts with external registries to inventory and download dependency updates.
- Evidence: The 'Tool Routing' section specifies the use of 'Official registry' and 'vendor advisory' for checking outdated and vulnerable packages.
Audit Metadata