dependency-audit

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install or use several external auditing tools. It fetches govulncheck from the official Go repository (golang.org/x), go-licenses from Google's official GitHub organization, and pip-audit from the Python Package Index (PyPI). It also uses npx to run well-known utilities such as npm-check-updates and license-checker. These are reputable sources and standard practices for dependency auditing.
  • [COMMAND_EXECUTION]: The skill performs shell command execution to run security audits (e.g., npm audit, pip-audit, cargo audit). These operations are necessary for the skill's primary function of scanning local project files for vulnerabilities and do not include suspicious or high-risk behaviors like privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 08:22 AM
Security Audit — agent-trust-hub — dependency-audit