cli-prompts-clack
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill uses established, well-known Node.js libraries (@clack/prompts and @clack/core) for terminal interactions.
- [DATA_EXPOSURE]: No sensitive file access or data exposure patterns were identified. Examples involving file system access (e.g., node:fs) are limited to standard local project logs.
- [COMMAND_EXECUTION]: No unauthorized or suspicious shell command executions are present. The skill focuses on TUI (Terminal User Interface) components for user input collection.
- [SAFE]: The skill documentation emphasizes security and stability best practices, such as verifying user cancellation (isCancel) and utilizing non-zero exit codes (130) to signal process interruption to parent shells.
Audit Metadata