agentic-jumpstart-dependency-management
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill provides instructions for installing various third-party npm packages (e.g., react, stripe, drizzle-orm, zod). These are well-known, standard industry libraries, and their use is consistent with the skill's documented purpose of dependency management.
- [COMMAND_EXECUTION] (LOW): The skill includes shell commands for project maintenance (e.g.,
npm audit,npm install,npm update). These commands are standard for Node.js development environments and are intended for legitimate project management tasks. - [NO_CODE] (SAFE): No executable scripts or obfuscated logic were found in the skill. The content consists entirely of informational markdown and illustrative code blocks.
Audit Metadata