dependency-audit
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install or use several external auditing tools. It fetches
govulncheckfrom the official Go repository (golang.org/x),go-licensesfrom Google's official GitHub organization, andpip-auditfrom the Python Package Index (PyPI). It also usesnpxto run well-known utilities such asnpm-check-updatesandlicense-checker. These are reputable sources and standard practices for dependency auditing. - [COMMAND_EXECUTION]: The skill performs shell command execution to run security audits (e.g.,
npm audit,pip-audit,cargo audit). These operations are necessary for the skill's primary function of scanning local project files for vulnerabilities and do not include suspicious or high-risk behaviors like privilege escalation.
Audit Metadata