cloudcannon-snippets

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No security issues were detected. The skill contains documentation and standard developer commands (grep, npm) required to configure the CloudCannon CMS. All analyzed patterns are consistent with the skill's stated purpose of project migration and configuration.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install astro-auto-import using npm. This is a well-known community package for the Astro static site generator. It also references @cloudcannon/scrap-booker, an official package for the CloudCannon platform. These downloads are from trusted or well-known sources and do not escalate the security verdict.
  • [COMMAND_EXECUTION]: The skill provides regular expression-based grep and sed commands to identify component usage in the project's source code. These are standard audit tools used to generate an inventory of the site's code for configuration purposes and are considered safe within the intended workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 10:12 PM