update-deps
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands including
git,uv,make, andpytestto automate the dependency update workflow as described inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill uses
uv sync --upgradeto download and update project dependencies from external package registries, which is the primary intended purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from command execution which could theoretically be influenced by external data such as package metadata or test results. 1. Ingestion points: Console output from
uv,make, andpytestreferenced inSKILL.md. 2. Boundary markers: None present. 3. Capability inventory: File system access via git, dependency management via uv, and command execution via make/pytest. 4. Sanitization: None present.
Audit Metadata