dependency-audit
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is educational, providing instructions for security auditing and vulnerability management.
- [SAFE]: All referenced tools (npm, pnpm, Snyk) and platforms (GitHub Actions, Dependabot) are well-known, legitimate services commonly used in software development.
- [SAFE]: Code examples demonstrate secure practices, such as referencing GitHub Secrets (
${{ secrets.SNYK_TOKEN }}) instead of hardcoding credentials. - [SAFE]: Mentions of historical attacks like Log4Shell and node-ipc are used as contextual examples to emphasize the importance of dependency auditing.
Audit Metadata