dependency-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate utility for software development, specifically for inventorying dependencies and classifying licenses across multiple programming languages.
- [SAFE]: All provided scripts (
dep_scanner.py,license_checker.py,upgrade_planner.py) utilize only Python standard library modules. No external or untrusted dependencies are introduced during execution. - [SAFE]: The dependency scanner operates in a best-effort offline mode, processing local manifest files (such as package.json, requirements.txt, and go.mod) without making network requests or exfiltrating data.
- [SAFE]: The instructions in
SKILL.mdprovide robust guidance for the AI agent, emphasizing the use of native resolved inventories and maintained advisory tools over simplified offline helpers for high-stakes security decisions. - [SAFE]: No obfuscation, dynamic code execution, or persistence mechanisms were found. The code includes specific protections against regular expression backtracking (ReDoS) in its lockfile parsers.
Audit Metadata