repo-standards
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill actively promotes security best practices by instructing the agent to verify that no hard-coded secrets, tokens, or API keys are present in the code.
- [SAFE]: The skill includes checks for Next.js security boundaries to prevent sensitive information from being leaked into client-side bundles.
- [COMMAND_EXECUTION]: The skill identifies and executes scripts defined within the repository's
package.jsonfile. While this involves running commands derived from project configuration, it is the core functionality required for linting, type-checking, and testing as intended by the skill's purpose. - [SAFE]: The provided Python script
scripts/discover_quality_gates.pyis a localized tool that inspects the environment to suggest appropriate commands without external network dependencies or obfuscated logic.
Audit Metadata