ping-orchestration-javascript-sdk

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a grep command on the local package.json file to identify the user's web framework (React, Vue, or Angular) during the setup process. This is a standard file-read operation for a developer tool.
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for multiple official SDK packages under the @forgerock namespace (e.g., @forgerock/journey-client, @forgerock/oidc-client). These packages are maintained by Ping Identity and are appropriate for the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 07:13 PM
Security Audit — agent-trust-hub — ping-orchestration-javascript-sdk