likec4-postcss-isolation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to run shell commands using
sh -cto temporarily change the working directory to/tmp. This is a legitimate technique used to prevent thelikec4tool from incorrectly loading PostCSS configuration files from the project root in a monorepo structure.- [EXTERNAL_DOWNLOADS]: The skill usesbunx(a JavaScript package runner) to fetch and execute thelikec4package from the public registry. The package is pinned to version1.59.2, which is a standard practice for ensuring consistency and security.
Audit Metadata