likec4-postcss-isolation

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to run shell commands using sh -c to temporarily change the working directory to /tmp. This is a legitimate technique used to prevent the likec4 tool from incorrectly loading PostCSS configuration files from the project root in a monorepo structure.- [EXTERNAL_DOWNLOADS]: The skill uses bunx (a JavaScript package runner) to fetch and execute the likec4 package from the public registry. The package is pinned to version 1.59.2, which is a standard practice for ensuring consistency and security.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 05:47 AM