offensive-dependency-confusion
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill documentation describes a methodology for security researchers to identify dependency confusion vulnerabilities across multiple package managers (npm, PyPI, Maven, etc.). It does not include any executable code, shell commands, or automated scripts.
- [SAFE]: No external network requests, data exfiltration patterns, or obfuscated content were detected in the skill's markdown or configuration files.
- [SAFE]: The skill provides a framework for auditing but does not implement any tools that could be abused for privilege escalation or persistence.
Audit Metadata