dependency-management-deps-audit
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's implementation guide describes the use of standard ecosystem tools, such as
npm audit, to identify known vulnerabilities in project lockfiles. - [EXTERNAL_DOWNLOADS]: The JavaScript analysis script retrieves package size metadata from
bundlephobia.com, a well-known and widely used service for analyzing NPM dependency impact. - [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted external data in the form of dependency manifests (e.g.,
package.json,requirements.txt). It includes instructions to prioritize fixes and verify upgrades, treating the ingested data as technical input for analysis rather than authoritative instructions.
Audit Metadata