upgrade-caniuse
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
npm,bun i, andgitcommands to manage package versions and commit changes to the repository.\n- [INDIRECT_PROMPT_INJECTION]: Accesses the rootpackage.jsonfile to identify and modify theoverridessection. Mandatory Evidence: 1. Ingestion points: Readspackage.jsonin the project root. 2. Boundary markers: None present. 3. Capability inventory: Usesnpmfor version checks,bun ifor installation, andgitfor version control. 4. Sanitization: None present.\n- [SAFE]: The skill's operations are consistent with standard repository maintenance and target a well-known package.
Audit Metadata