node-deps-bumper
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
tazevia a shell script (scripts/run-taze.sh) to scan for and apply dependency updates. It also runs repository-specific validation commands (tests, linting, etc.) to verify updates before and after changes. - [DYNAMIC_EXECUTION]: The
scripts/run-taze.shscript usesuv runto execute a Python parser (scripts/parse-taze-plan.py) for processing Taze output. Similarly,SKILL.mdorchestrates the execution ofscripts/update-bun-catalogs.pyto handle Bun-specific configuration updates. - [SAFE]: All external downloads and package manager operations (npm, pnpm, yarn, bun, taze) are performed using standard, well-known ecosystem tools and registries. The skill enforces a strict verification workflow, requiring a passing baseline and user approval for major version upgrades. File writes to
package.jsonare handled atomically viascripts/update-bun-catalogs.pyusing standard temporary file patterns.
Audit Metadata