dependency-scout
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements dependency scanning functionality using standard system tools. Access is correctly restricted to relevant network domains and specific output directories. The provided Python script is a basic stub with no malicious capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze project manifest files. While this presents a potential attack surface for indirect prompt injection from external dependency data, the agent is constrained by limited write permissions and a scoped toolset, which effectively mitigates the risk of exploitation.
Audit Metadata