dependency-audit
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a set of shell commands for security auditing, including
npm audit,pnpm audit,trivy,gitleaks, andcheckov. These are standard utilities used for software composition analysis and secret detection. - [EXTERNAL_DOWNLOADS]: The instructions include the installation of reputable security packages such as
safetyandpip-auditvia pip, as well as the execution of tools likesnykandnpm-check-updatesvia npx. These resources are from well-known providers and are appropriate for the skill's stated purpose of dependency auditing.
Audit Metadata