cve-known-vulnerabilities
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill utilizes local build tools and project-specific wrappers (such as
./mvnw,./gradlew,dotnet, andnpm) to extract dependency lists. This is a common practice for dependency analysis but involves executing code within the local project environment, which requires the workspace content to be trusted. - External Data Retrieval: The skill fetches vulnerability data from the GitHub Security Advisories API. This involves transmitting project dependency names and versions to an external service and processing the returned data within the agent's context.
- Indirect Prompt Injection Surface: The skill processes information retrieved from external APIs and local project files. Although the data is structured, ingesting external content creates a potential surface for indirect prompt injection, where malicious data could attempt to influence the agent's behavior.
- Manifest and Lock File Parsing: The skill may perform static analysis of manifest files (like
pom.xml,package.json, orDirectory.Packages.props) when build tools are unavailable. While safer than execution, processing these files still involves handling external data inputs.
Audit Metadata