upstream-fix-and-pin
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and workflow instructions for developers to fix bugs in upstream dependencies and pin them using git SHAs.
- [COMMAND_EXECUTION]: The skill suggests standard git commands (rev-parse, ls-remote, fetch) for retrieving commit SHAs. These are routine development operations.
- [EXTERNAL_DOWNLOADS]: References to external repositories (GitHub) are standard for dependency management and follow the intended purpose of the skill.
Audit Metadata