bump-deps

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
2
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- argument-hint: '[package ...]' disable-model-invocation: false name: bump-deps user-invocable: true description: This skill should be used when the user asks to "update dependencies", "update npm packages", "bump dependencies", "upgrade node packages", "check for outdated packages", "update package.json", or mentions dependency updates, npm/pnpm/yarn/bun package upgrades, or taze CLI usage.

scripts/run-taze.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/run-taze.sh Description: #!/usr/bin/env bash # run-taze.sh - Run taze in non-interactive mode # # Usage: run-taze.sh [--include pkg1,pkg2] [path] # # Automatically detects monorepo projects (workspaces in package.json # or pnpm-workspace.yaml) and enables recursive mode.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
2
Analyzed
Feb 23, 2026, 04:01 PM
Security Audit — runlayer — bump-deps