dependency-audit
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes standard security auditing tools (
npm audit,cargo audit, andpip-audit) as subprocesses. These commands are executed locally to analyze project manifests found within the designated scope. - [EXTERNAL_DOWNLOADS]: The auditing tools utilized by the skill connect to well-known, official vulnerability databases and package registries (such as the npm registry and the Python Advisory Database) to retrieve the latest security advisory information. This is standard and necessary behavior for the skill's primary function.
Audit Metadata