eve-forge
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/eve_forge.pyexecutesnode --versionto perform a benign preflight check, ensuring the environment is compatible with Node.js 24 requirements. - [EXTERNAL_DOWNLOADS]: The skill uses
npxand Vercel CLI to fetch the necessary framework and deployment tools from the public NPM registry, which is the intended behavior for agent scaffolding and deployment. - [SAFE]: The skill incorporates a dedicated security script,
deploy_safety.py, which acts as a fail-closed gate by verifying that production channels use real authenticators and do not ship with insecure placeholders.
Audit Metadata