chromatic-turbosnap-debug
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide technical support for TurboSnap, and its instructions are focused on legitimate diagnostic workflows without any malicious patterns.
- [COMMAND_EXECUTION]: The skill utilizes common, low-risk local commands such as
ripgrep(rg) andgitto search configuration files and repository history. These operations are limited to read-only information gathering within the project environment. - [EXTERNAL_DOWNLOADS]: Recommended diagnostic actions include running official Chromatic packages through
npx. These tools are legitimate vendor resources provided by the skill author for debugging purposes. - [DATA_EXFILTRATION]: The skill includes explicit instructions for the agent to refrain from directly fetching remote metadata via URLs, instead requiring the user to share information manually or provide local file paths, which ensures data remains under user oversight.
Audit Metadata