dependency-audit

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a set of shell commands for security auditing, including npm audit, pnpm audit, trivy, gitleaks, and checkov. These are standard utilities used for software composition analysis and secret detection.
  • [EXTERNAL_DOWNLOADS]: The instructions include the installation of reputable security packages such as safety and pip-audit via pip, as well as the execution of tools like snyk and npm-check-updates via npx. These resources are from well-known providers and are appropriate for the skill's stated purpose of dependency auditing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 09:25 AM
Security Audit — agent-trust-hub — dependency-audit