yy-check-skills-scripts
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mdguide the user to execute standard shell commands (npm install,npm run start) to run the project scanner. - [EXTERNAL_DOWNLOADS]: The project configuration in
scripts/package.jsonspecifies dependencies on standard, well-known development tools including ESLint, Prettier, and TypeScript, which are downloaded from the official npm registry during installation. - [SAFE]: The skill's logic is limited to local file system operations, specifically enumerating directory structures within
skills/andskills-internal/to identify projects requiring script updates. No unauthorized data access, network exfiltration, or obfuscation techniques were identified.
Audit Metadata