dependencies
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands using the
pnpmpackage manager (e.g.,pnpm dedupe,pnpm add,pnpm remove,pnpm lint:syncpack). These are routine operations for managing a JavaScript monorepo. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent reads and modifies project configuration files such as
package.json,pnpm-workspace.yaml, and.github/dependabot.yml. - Ingestion points: Reads dependency configurations from the local filesystem.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: File read/write access and shell command execution via
pnpm. - Sanitization: Relies on standard
pnpmandsyncpackvalidation logic to ensure configuration integrity.
Audit Metadata