migrating-to-cloudcannon
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to run the official CloudCannon command-line interface using
npx @cloudcannon/cli. This downloads and executes the package from the well-known NPM registry to perform project detection and configuration tasks. - [COMMAND_EXECUTION]: Provided shell scripts (
audit-astro.shandrename-dash-index.sh) are used to gather project metadata and perform file renames within the local project directory. These scripts are deterministic and do not involve unauthorized network activity. - [COMMAND_EXECUTION]: The auditing automation uses
node -eas a helper to parse JSON data from the localpackage.jsonfile. This is a common and safe technique for extracting project dependencies and version information.
Audit Metadata