dependency-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests untrusted data from external dependency manifests and vulnerability databases to drive agent actions.
- Ingestion points: Manifest files (package.json, requirements.txt), lock files (package-lock.json, Pipfile.lock), and external vulnerability feeds (NVD, OSV, GitHub Advisory).
- Boundary markers: None identified in the provided instructions to delimit external content from internal logic.
- Capability inventory: The skill utilizes shell command execution (subprocess calls to npm/pip) and file-system write operations (updating manifest files with recommended fixes).
- Sanitization: No explicit sanitization or validation logic is described for the data received from external databases before it is interpolated into remediation steps.
- [COMMAND_EXECUTION]: The skill uses standard command-line tools to perform its intended function. These commands are well-documented and restricted to their respective ecosystems.
- Evidence: Usage of
npm audit --jsonfor Node.js analysis andpip-audit -r requirements.txtfor Python scanning.
Audit Metadata