scaffold-node-tool-quality-gates
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a security-conscious workflow by requiring a 'confirmation-before-write' step, ensuring the user reviews all proposed file changes before they are applied.
- [COMMAND_EXECUTION]: Proposes the use of standard Node.js and shell commands (e.g.,
node --check,find,xargs,npm) for syntax validation and testing within build scripts and CI/CD workflows. - [EXTERNAL_DOWNLOADS]: References official documentation and utilizes standard tools from trusted sources, including the official Node.js website, npm registry, ESLint, and verified GitHub Actions from the @actions organization.
- [SAFE]: Provides explicit guidance on preventing data exposure, specifically recommending that tool outputs and error messages mask secrets and that tests use dummy credentials.
Audit Metadata