secure-dependency-health-check
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted package names and metadata within its evaluation workflow. 1. Ingestion points: User-provided package names and tool outputs from mcp_snyk_snyk_package_health_check. 2. Boundary markers: The skill instructions present results in structured Markdown tables but lack explicit delimiters or 'ignore instructions' directives for processed metadata. 3. Capability inventory: The skill has access to Bash, Read, Write, and Grep as defined in the SKILL.md frontmatter. 4. Sanitization: No explicit sanitization or validation of the external package data is described before interpolation into comparisons.- [COMMAND_EXECUTION]: The skill includes Bash in its allowed-tools list; however, the instructions focus on using the specialized Snyk MCP tool and do not prescribe arbitrary or dangerous shell command execution.- [DATA_EXPOSURE]: The documentation mentions authentication via a SNYK_TOKEN environment variable. This is a standard and acceptable practice for managing secrets in development environments.
Audit Metadata