node-26
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and reference materials focus entirely on standard Node.js development practices, such as upgrading runtimes, adopting new ECMAScript features, and verifying dependency compatibility.
- [COMMAND_EXECUTION]: The skill includes shell commands using
ripgrep(rg) to search for deprecated APIs and native addon configurations within the local project. These are standard developer tools used for auditing and migration tasks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local source code and configuration files. While this represents a common attack surface for indirect prompt injection if project files contain malicious instructions, the skill's logic is constrained to identifying specific Node.js upgrade markers.
Audit Metadata