snyk-ux-security
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development and security CLI tools including
snyk,bun,go, andgh. These operations are well-scoped to dependency management, auditing, and triggering existing GitHub Actions workflows. - [DATA_EXFILTRATION]: The skill communicates with Snyk's official dashboard (
app.snyk.io) via thesnyk monitorcommand and interacts with GitHub APIs. These are well-known technology services used for their intended purpose of security monitoring and repository management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from
package.json,go.mod, and remoteCHANGELOG.mdfiles to inform its upgrade logic. While this represents a potential attack surface for indirect prompt injection if those files contain malicious instructions, the skill's capabilities are restricted to dependency updates and PR creation, and it incorporates manual review gates (CODEOWNERS/Security team reviews). - Ingestion points:
package.json,go.mod,.snyk, and remoteCHANGELOG.mdfiles (SKILL.md, REFERENCE.md). - Boundary markers: Not explicitly defined for external changelog parsing.
- Capability inventory: Execute shell commands via
snyk,bun,go,git, andgh(SKILL.md, REFERENCE.md). - Sanitization: None specified for external changelog content.
Audit Metadata