upgrade-dependency
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as third-party release notes, changelogs, and migration guides during its research phase.
- Ingestion points: External documentation, package manifests, and security advisory databases (GHSA, OSV, Snyk, Socket).
- Boundary markers: No specific delimiters for research text are noted.
- Capability inventory: Modifies project files and executes package management and verification commands (e.g.,
bun,go,lint,test). - Sanitization: The skill mitigates risks through a dedicated "Supply-chain gate" which blocks lifecycle scripts, rejects raw URL dependencies, and enforces a minimum package release age (7-30 days).
- [COMMAND_EXECUTION]: The skill executes package management commands (e.g.,
bun update,go get) and project verification scripts (e.g.,bun run lint:fix,go test). These are standard operations for dependency management and are restricted by the safety logic defined in the "Supply-chain gate" section.
Audit Metadata