h5p-type-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes inline Python scripts within Bash utilities (scaffold.sh, pack.sh, h5p-dev.sh) to parse and process JSON metadata from H5P library configuration files. This is a legitimate functional requirement for extracting version information and dependencies during the scaffolding process.
- [EXTERNAL_DOWNLOADS]: The project templates include package.json files that reference external libraries and community-maintained linting configurations such as eslint-config-snordian-h5p. These represent standard development dependencies within the H5P ecosystem.
- [COMMAND_EXECUTION]: The skill executes local system commands including zip, find, ln, and cp to manage file operations and archive creation. These operations are restricted to the scaffolding tasks and are consistent with the skill's stated purpose.
Audit Metadata