Supply Chain Security
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate functionality for auditing software supply chains, identifying risks such as typosquatting and malicious package hooks.\n- [EXTERNAL_DOWNLOADS]: The skill documentation references several well-known and trusted security tools, including Syft, Grype, Cosign, and OpenSSF Scorecard. These are standard industry tools from reputable organizations.\n- [COMMAND_EXECUTION]: The supply_chain_auditor.py script executes local file read operations to analyze project manifest files (package.json, requirements.txt, etc.). This is the intended and safe behavior for a static analysis tool.\n- [DATA_EXFILTRATION]: The auditor script optionally performs network requests to official package registries (registry.npmjs.org, pypi.org, crates.io) to verify package existence. These are whitelisted, well-known services.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted manifest files using scripts/supply_chain_auditor.py. While no explicit boundary markers are used in the tool's output, it utilizes safe parsing methods like yaml.safe_load() and performs static regex-based analysis rather than executing content, mitigating potential injection risks. The script's capabilities are limited to file reads and network GET requests to trusted registries.
Audit Metadata