agent-native-framework
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx @agent-native/corefor project scaffolding and adding visual planning capabilities. These packages are part of the vendor's own namespace (Aradotso) and are used for their intended purpose of application initialization. - [COMMAND_EXECUTION]: Standard development commands such as
pnpm install,pnpm dev, andpnpm buildare documented. These are restricted to the local development environment and are expected for the described workflow. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive credentials like
DATABASE_URLandOPENAI_API_KEYusing environment variables (.envfiles), which is a standard security best practice to avoid hardcoding secrets. - [SAFE]: Code snippets demonstrate communication with external services (e.g., search, email, and payment providers) using generic placeholders and
fetchrequests. These serve as architectural examples and do not involve unauthorized data transmission or exfiltration.
Audit Metadata