dependency-audit

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs auditing tools such as govulncheck and go-licenses from official Google repositories. It also utilizes standard package managers (pip, npx) to fetch security scanning utilities when required.
  • [REMOTE_CODE_EXECUTION]: Installs and executes remote binaries for vulnerability scanning. These resources originate from well-known and trusted technology providers such as Google and the official Go project.
  • [COMMAND_EXECUTION]: Executes shell commands to run package manager audit tools (npm audit, go list, pip-audit) and processes their JSON output using inline Python scripts to generate formatted reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 10:02 AM
Security Audit — agent-trust-hub — dependency-audit