dependency-scan
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from project manifest files (e.g., package.json, requirements.txt, Cargo.toml) and configuration files (.dependency-scan-ignore) to perform its primary function.
- Ingestion points: Manifest file parsing and configuration file reading in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are defined to isolate external manifest data from the agent's processing logic.
- Capability inventory: The skill possesses the ability to execute system commands (auditing tools) and perform file-write operations (auto-fix functionality).
- Sanitization: There is no mention of explicit validation, escaping, or sanitization of external manifest content before it is processed by the scanning tools.
Audit Metadata