code-dep-audit
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
!command syntax to executefindat skill load time. This discovery step is used solely to identify package manifest files (e.g., package.json, Cargo.toml) within the project to provide context for the agent. - [COMMAND_EXECUTION]: Executes standard dependency audit commands including
npm audit,pip-audit,cargo audit, andgo list. These are recognized development tools used for identifying security vulnerabilities and maintenance needs. - [EXTERNAL_DOWNLOADS]: Utilizes
npxto dynamically download and execute thelicense-checkerpackage from the npm registry. This is a common and legitimate practice for running audit utilities without permanent local installation. - [COMMAND_EXECUTION]: Includes automated remediation steps such as
npm audit fix,cargo update, andpip install --upgrade. These commands are standard for applying security patches to project dependencies.
Audit Metadata