biome
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for downloading the Biome binary from its official GitHub repository (github.com/biomejs/biome). This is a standard and safe procedure for installing the toolchain from a trusted vendor.
- [EXTERNAL_DOWNLOADS]: The maintenance script scripts/check-updates.py performs a network request to the official npm registry (registry.npmjs.org) to retrieve the latest version information for the @biomejs/biome package. This is a legitimate update-checking mechanism targeting a well-known service.
- [COMMAND_EXECUTION]: The skill includes numerous examples of Biome CLI commands (e.g., biome check, biome format, biome lint). These are standard operations for the tool and are documented for user guidance.
- [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, or obfuscation, were found. The skill's architecture is clean, and its scripts are transparent and limited to legitimate maintenance tasks.
Audit Metadata