dependency-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard package management commands including
npm audit,npm outdated, andnpm updateto perform dependency security and version checks.\n- [EXTERNAL_DOWNLOADS]: To provide comprehensive reporting, the skill downloads and runs several well-known community utilities vianpx, such asbundle-phobia-cli,license-checker,depcheck, andwebpack-bundle-analyzer.\n- [EXTERNAL_DOWNLOADS]: The skill incorporates the author's own package,@j0kz/dependency-analyzer, which is a vendor-owned resource used for automated dependency auditing consistent with the skill's purpose.
Audit Metadata