blitz-create-script
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (detect_pm.sh and verify_sdk.sh) to identify the appropriate package manager and verify that the required SDKs are properly installed.
- [EXTERNAL_DOWNLOADS]: The skill uses standard package managers (uv, pip, bun, npm) to download and install official libraries (blitz-api-py and blitz-api-js) from public registries.
- [SAFE]: The skill provides explicit instructions to manage API keys through environment variables and .env files, including guidance on using .gitignore to prevent credential exposure.
Audit Metadata