cloudcannon-snippets
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security issues were detected. The skill contains documentation and standard developer commands (grep, npm) required to configure the CloudCannon CMS. All analyzed patterns are consistent with the skill's stated purpose of project migration and configuration.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install
astro-auto-importusing npm. This is a well-known community package for the Astro static site generator. It also references@cloudcannon/scrap-booker, an official package for the CloudCannon platform. These downloads are from trusted or well-known sources and do not escalate the security verdict. - [COMMAND_EXECUTION]: The skill provides regular expression-based
grepandsedcommands to identify component usage in the project's source code. These are standard audit tools used to generate an inventory of the site's code for configuration purposes and are considered safe within the intended workflow.
Audit Metadata