frontend-review-deps
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
scripts/audit-deps.sh,scripts/audit-trend-watch.sh, andscripts/fetch-trend-data.sh) and standard CLI tools (pnpm,jq). These operations are necessary for the skill to perform dependency analysis and trend monitoring within the local project environment. - [EXTERNAL_DOWNLOADS]: The reference to
scripts/fetch-trend-data.shimplies that the skill may fetch external data related to library trends. This is a legitimate requirement for its 'Trend Watch' functionality to stay updated on library maintenance statuses. - [DATA_EXPOSURE]: The skill reads project configuration files such as
package.jsonand internal analysis files likeraw/deps.json. It outputs findings to Markdown files within the repository (.frontend-review/report/). This data handling is scoped to the project being audited and does not involve exfiltration of sensitive information.
Audit Metadata