Skill-Audit-Bericht
ai-assist-npm-update Audit-Bericht.
Bulk-update outdated npm dependencies across one or more package.json files. Finds every package.json in the current working directory (recursively, skipping node_modules), runs npm outdated, bumps each outdated dependency to its 'wanted' version prefixed with ^, then runs npm install. Use whenever the user wants to update npm dependencies, bump packages to their wanted versions, refresh package.json versions, or run npm outdated and apply the results — including across a monorepo or multiple projects at once. Triggers on: update npm packages, update dependencies, bump npm versions, npm outdated, refresh package.json.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub-Akzeptanz
Warnung48
88 GitHub-Stars
Star-/Fork-Aktivität
Warnung48
88 Stars und 12 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Aktuelle Wartung
Bestanden100
3 Tage seit dem letzten Push
Lizenzklarheit
Warnung42
Unbekannt
README/SKILL.md-Vollständigkeit
Bestanden86
Metadaten enthalten ausreichend Nutzungs- und Workflow-Kontext
Abhängigkeits-/Laufzeitrisiko
Info62
command execution surface, external package install surface
Installationsverfügbarkeit
Bestanden92
npx skills add jparkerweb/ai-assist-skills --skill ai-assist-npm-update
Sicherheit des Installationsbefehls
Bestanden92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
Info62
shell or command execution, filesystem or document access
Repository-Nachweis
Bestanden86
https://github.com/jparkerweb/ai-assist-skills/tree/main/skills/ai-assist-npm-update
Prüfstatus
Info66
KI-Prüfdaten verfügbar
Agent-validierte Ergebnisse
Info54
Noch keine Agent-Ergebnisdaten
Prüfungen
Installations- und Adoptionsprüfung
Installationspfad
92
npx skills add jparkerweb/ai-assist-skills --skill ai-assist-npm-update
Repository
88
https://github.com/jparkerweb/ai-assist-skills/tree/main/skills/ai-assist-npm-update
Lizenz
45
Unbekannt
Wartung
100
3 Tage seit dem letzten Push
KI-Prüfung
55
The repository license is listed as Unknown, and the skill itself does not include an explicit license or attribution statement, which creates legal uncertainty for reuse.
README/SKILL.md-Vollständigkeit
86
Usable description available
Abhängigkeitsrisiko
62
command execution surface, external package install surface
Sicherheit des Installationsbefehls
92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
62
shell or command execution, filesystem or document access
Star-/Fork-Aktivität
48
88 Stars und 12 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Akzeptanz
68
88 GitHub-Stars
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Warnungen
- Lizenz ist unklar
- Financial research output is not financial advice; require human review before any live investment decision
- The repository license is listed as Unknown, and the skill itself does not include an explicit license or attribution statement, which creates legal uncertainty for reuse.
- The script always rewrites version specifiers as ^<wanted> regardless of the original range, which could unintentionally change the intended semver constraints; this is documented but may be surprising.
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- GitHub adoption: 88 GitHub stars
- Stars/forks activity: 88 stars, 12 forks; issue activity unavailable in current metadata
- License clarity: Unknown
Methode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.