scaffold-dashboard

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a legitimate project scaffolding tool, providing a structured foundation and generator scripts for building a dashboard application.
  • [COMMAND_EXECUTION]: The skill includes scaffold.sh for initial project setup and create-resource.ts for scaffolding CRUD vertical features. These scripts utilize standard commands like rsync, bun install, and bunx biome check which are appropriate for their intended purpose.
  • [EXTERNAL_DOWNLOADS]: The package.json file references standard, well-known industry packages from the npm registry, such as TanStack Query, Drizzle ORM, and better-auth.
  • [CREDENTIALS_UNSAFE]: Sensitive configuration is handled via environment variables with placeholders provided in .env.example. The authentication logic in src/lib/auth.ts uses a development-only secret fallback while enforcing that a secure secret must be provided for production deployments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 08:13 PM
Security Audit — agent-trust-hub — scaffold-dashboard