fusion-to-publish
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure management of the NEXT_PUBLIC_BUILDER_API_KEY by directing the agent to store it in .env.local and verifying that the file is excluded from version control via .gitignore.
- [SAFE]: All external dependencies, including @builder.io/react, @builder.io/sdk, and @builder.io/dev-tools, are official packages provided by the skill's author (Builder.io) and are installed using standard package managers.
- [SAFE]: The skill performs automated project scaffolding, such as creating catch-all routes and a component registry. This is consistent with its stated purpose of bridging code generation with a visual CMS.
- [SAFE]: Component analysis for registration purposes involves reading local TypeScript files and mapping properties to input types. This process is a standard local development automation and does not involve exfiltrating data or executing untrusted code.
Audit Metadata