1k-patch-package-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard shell utilities including
cp,mktemp, andunzipto manage temporary files and extract package contents for diffing. It also leveragesgitto initialize a temporary repository and generate diff patches between pristine and modified package sources.- [DYNAMIC_EXECUTION]: The workflow includes a Node.js one-liner used to programmatically modify the localpackage.jsonfile. Specifically, it deletes theresolutionskey to ensurepatch-packagecan successfully find package versions during generation. The skill includes safety steps to back up and restore the original file contents.
Audit Metadata