supply-chain-security
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is security auditing and its functions align with that goal. It uses standard development tools and libraries.
- [COMMAND_EXECUTION]: The skill uses shell commands and script execution (
execSync,node -e,npm show) to perform audits. This is expected behavior for an auditing tool scanning local project files and package registries. - [DATA_EXPOSURE]: The skill reads project configuration files like
package.jsonandnode_modulescontent. These operations are performed locally for analysis and do not involve sensitive system secrets or unauthorized external transmission of data.
Audit Metadata