lighthouse

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard project build and preview commands (e.g., npm run build, npm start) to audit production-ready versions of web applications. These operations are limited to the local environment and the project's own scripts.
  • [EXTERNAL_DOWNLOADS]: Utilizes npx to execute well-known and official utilities including lighthouse and serve from the standard npm registry. These are established industry tools and are treated as safe within this context.
  • [DATA_EXFILTRATION]: Includes curl commands strictly for health-checking the local server availability (localhost). No access to sensitive files or external network exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 10:16 AM