dependency-audit
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs auditing tools such as govulncheck and go-licenses from official Google repositories. It also utilizes standard package managers (pip, npx) to fetch security scanning utilities when required.
- [REMOTE_CODE_EXECUTION]: Installs and executes remote binaries for vulnerability scanning. These resources originate from well-known and trusted technology providers such as Google and the official Go project.
- [COMMAND_EXECUTION]: Executes shell commands to run package manager audit tools (npm audit, go list, pip-audit) and processes their JSON output using inline Python scripts to generate formatted reports.
Audit Metadata