1k-patch-package-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several standard shell utilities including cp, mktemp, and unzip to manage temporary files and extract package contents for diffing. It also leverages git to initialize a temporary repository and generate diff patches between pristine and modified package sources.- [DYNAMIC_EXECUTION]: The workflow includes a Node.js one-liner used to programmatically modify the local package.json file. Specifically, it deletes the resolutions key to ensure patch-package can successfully find package versions during generation. The skill includes safety steps to back up and restore the original file contents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 08:38 PM
Security Audit — agent-trust-hub — 1k-patch-package-workflow