dependency-upgrade
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard package management commands for inventory and upgrade purposes (e.g.,
npm outdated,pip list --outdated,npm install package@version). These are the primary, intended actions of the skill for managing dependencies and are used in a safe, standard manner. - [REMOTE_CODE_EXECUTION]: While package managers (
npm,pip,cargo, etc.) download code from their respective official registries, this is the core function of the skill's purpose (upgrading dependencies). There are no signs of executing code from untrusted or arbitrary URLs. - [DATA_EXPOSURE]: The skill accesses project configuration files like
package.json,requirements.txt, and lockfiles to identify and update dependencies. This is necessary for the skill's function and does not involve accessing sensitive user credentials or environment secrets.
Audit Metadata