audit-ide-dependencies
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a security diagnostic tool for identifying vulnerabilities in the IDE supply chain (Cursor and VS Code extensions).
- [COMMAND_EXECUTION]: Employs standard shell commands such as
find,cd, andexportto locate local lockfiles within specified IDE directories. - [EXTERNAL_DOWNLOADS]: Triggers
npm auditandpnpm auditto query official package registries. These are well-known and trusted services used for verifying dependency security. - [DATA_EXFILTRATION]: Reads local extension and plugin metadata to facilitate auditing. While it interacts with external registries, it only transmits package identifiers and versions to official services (npmjs.com, pnpm.io) for security analysis.
Audit Metadata