dev-dashboard
Warn
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill establishes persistence by installing executable shims (
dev-dashboardanddev-dashboard-stop) into the user's local binary directory (~/.local/bin). This allows the dashboard to be launched from any terminal session independently of the AI agent context. - [COMMAND_EXECUTION]: The
install.shscript employs dynamic execution by generating shell script shims at runtime. It writes logic to a temporary file, applies executable permissions withchmod +x, and moves the resulting files to a persistent path on the system. - [COMMAND_EXECUTION]: The
start.shscript usesnode -eto dynamically evaluate a Javascript snippet for parsing the configuration file and resolving the preferred server port. - [COMMAND_EXECUTION]: The skill executes multiple local shell scripts (
check-install.sh,install.sh,start.sh) and a bundled Node.js server to perform its primary functions. - [SAFE]: The dashboard's HTML file references external font resources from well-known and trusted services (
fonts.googleapis.comandfonts.gstatic.com).
Audit Metadata