skills/cevio/hile/hile-monorepo/Gen Agent Trust Hub

hile-monorepo

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The repository implements a robust service container system (@hile/core) and associated infrastructure modules. All identified patterns are standard for Node.js frameworks and service-oriented architectures.
  • [COMMAND_EXECUTION]: The package includes CLI tools that execute system commands for legitimate administrative tasks:
  • packages/cli/src/index.ts executes npm root -g to locate globally installed packages for plugin discovery.
  • packages/create-hile/src/create.ts uses child_process.spawn to run package managers (pnpm, yarn, or npm) to install dependencies for newly scaffolded projects.
  • [EXTERNAL_DOWNLOADS]: The project manages standard library dependencies via NPM registries. No suspicious third-party downloads or remote script executions were identified.
  • [PROMPT_INJECTION]: The SKILL.md files provide architectural guidelines and constraints for AI coding models. These instructions focus on maintaining project structure and following framework patterns, with no evidence of attempts to bypass safety filters or override agent constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 08:53 AM