dep-lib-review
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands including
pnpm outdated,pnpm audit,pnpm update, andpnpm add. These are used as intended for dependency management and security auditing. - [DATA_EXPOSURE]: The skill reads project configuration files such as
package.json,pnpm-lock.yaml,renovate.json, anddependabot.yml. This access is necessary for its stated purpose of reviewing project dependencies. - [EXTERNAL_DOWNLOADS]: Network activity is restricted to standard package manager operations (
pnpm update,pnpm add) which communicate with the official npm registry to fetch package metadata and updates.
Audit Metadata