vulnerability-scanning
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified. The skill correctly demonstrates how to use established security tools for auditing purposes.
- [COMMAND_EXECUTION]: Provides instructions for executing various security CLI tools including
npm audit,snyk,safety,trivy, andbanditto scan filesystem and dependencies. - [EXTERNAL_DOWNLOADS]: The GitHub Actions configuration section references external actions from well-known security vendors (Aquasecurity and Snyk) to implement CI/CD security gates.
- [COMMAND_EXECUTION]: Includes a Node.js utility script that uses
child_process.execSyncto run security audits and check for critical vulnerabilities programmatically.
Audit Metadata