Skill audit report
ai-assist-npm-update Audit report.
Bulk-update outdated npm dependencies across one or more package.json files. Finds every package.json in the current working directory (recursively, skipping node_modules), runs npm outdated, bumps each outdated dependency to its 'wanted' version prefixed with ^, then runs npm install. Use whenever the user wants to update npm dependencies, bump packages to their wanted versions, refresh package.json versions, or run npm outdated and apply the results — including across a monorepo or multiple projects at once. Triggers on: update npm packages, update dependencies, bump npm versions, npm outdated, refresh package.json.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
WARN48
88 GitHub stars
Stars/forks activity
WARN48
88 stars, 12 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
2d since push
License clarity
WARN42
Unknown
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
INFO62
command execution surface, external package install surface
Install availability
PASS92
npx skills add jparkerweb/ai-assist-skills --skill ai-assist-npm-update
Install command safety
PASS92
standard package or runtime install path
Permission surface
INFO62
shell or command execution, filesystem or document access
Repository evidence
PASS86
https://github.com/jparkerweb/ai-assist-skills/tree/main/skills/ai-assist-npm-update
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add jparkerweb/ai-assist-skills --skill ai-assist-npm-update
Repository
88
https://github.com/jparkerweb/ai-assist-skills/tree/main/skills/ai-assist-npm-update
License
45
Unknown
Maintenance
100
2d since push
AI review
55
The repository license is listed as Unknown, and the skill itself does not include an explicit license or attribution statement, which creates legal uncertainty for reuse.
README/SKILL.md completeness
86
Usable description available
Dependency risk
62
command execution surface, external package install surface
Install command safety
92
standard package or runtime install path
Permission surface
62
shell or command execution, filesystem or document access
Stars/forks activity
48
88 stars, 12 forks; issue activity unavailable in current metadata
Adoption
68
88 GitHub stars
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Warnings
- License is unclear
- Financial research output is not financial advice; require human review before any live investment decision
- The repository license is listed as Unknown, and the skill itself does not include an explicit license or attribution statement, which creates legal uncertainty for reuse.
- The script always rewrites version specifiers as ^<wanted> regardless of the original range, which could unintentionally change the intended semver constraints; this is documented but may be surprising.
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- GitHub adoption: 88 GitHub stars
- Stars/forks activity: 88 stars, 12 forks; issue activity unavailable in current metadata
- License clarity: Unknown
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options