detecting-dependency-confusion
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/agent.pyusessubprocess.runto execute theconfusedcommand-line tool. This is a functional requirement for the skill's detection logic and is implemented without using a shell, minimizing injection risks. - [EXTERNAL_DOWNLOADS]: The skill recommends the use of official security packages from the OWASP Foundation and Visma ProdSec. These are well-known industry resources for supply-chain security auditing.
- [DATA_EXFILTRATION]: The helper script performs network lookups on public registries including npmjs.org, pypi.org, and rubygems.org to determine if package names are claimable. These operations are transparent and restricted to the specific task of namespace verification.
Audit Metadata