security-scan
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
ecc-agentshieldpackage from the npm registry and references its public source code repository on GitHub. These resources are provided by the skill's author. - [COMMAND_EXECUTION]: The skill provides instructions to execute several shell commands. These include scanning the local directory for security issues, automatically fixing vulnerabilities (
--fix), and initializing new configuration files (init). These operations are consistent with the skill's stated purpose of managing project security. - [REMOTE_CODE_EXECUTION]: Several commands utilize
npxto download and execute theecc-agentshieldtool directly from the npm registry. This is a standard method for running Node.js CLI tools without permanent installation.
Audit Metadata