pake-app-builder
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official Rust installation script (
https://sh.rustup.rs | sh) if the Rust compiler is missing. This is a standard procedure for installing the Rust toolchain from its official source. - [COMMAND_EXECUTION]: The skill executes shell commands for environment verification (
scripts/check-env.sh), package management (npx pake-cli), and file management (cd ~/Downloads). These are standard operations for a build-oriented skill. - [EXTERNAL_DOWNLOADS]: The skill downloads the
pake-clipackage vianpxfrom the official NPM registry and fetches the Rust toolchain fromsh.rustup.rswhen necessary. Both are well-known and trusted sources for developer tools. - [COMMAND_EXECUTION]: The skill includes instructions to remove extended attributes on macOS using
xattr -crto allow the built application to run. This is a common requirement for non-notarized applications built locally.
Audit Metadata