base44-cli
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
base44CLI tool via package managers (npx, yarn, pnpm) for core project tasks like initialization, linking, and deployment. These operations are restricted to the local environment and the platform's official backend. - [REMOTE_CODE_EXECUTION]: The skill manages remote code deployment through
base44 functions deploy, which uploads Deno-based serverless functions to the platform. It also includes anexeccommand for running scripts server-side with pre-authenticated SDK access, intended for administrative tasks and debugging. - [SAFE]: The skill enforces a mandatory authentication check using
npx base44 whoamiat the start of every session, explicitly instructing the agent to stop operations if the user is not logged in. - [SAFE]: Secret management is handled securely through the
base44 secretscommand suite, which stores environment variables in the platform's encrypted backend rather than local source code. - [SAFE]: All documented URLs (e.g., auth.base44.com, base44.cloud, base44.io) and package names (@base44/sdk) are consistent with the identified vendor identity, with no evidence of typosquatting or suspicious external references.
Audit Metadata