skills/broomva/skills/eve-forge/Gen Agent Trust Hub

eve-forge

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/eve_forge.py executes node --version to perform a benign preflight check, ensuring the environment is compatible with Node.js 24 requirements.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx and Vercel CLI to fetch the necessary framework and deployment tools from the public NPM registry, which is the intended behavior for agent scaffolding and deployment.
  • [SAFE]: The skill incorporates a dedicated security script, deploy_safety.py, which acts as a fail-closed gate by verifying that production channels use real authenticators and do not ship with insecure placeholders.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 03:03 PM
Security Audit — agent-trust-hub — eve-forge