ship
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the author's official
@codewithbeto/shipcommand-line utility. It automates project setup, including cloning templates, configuring app metadata, and running package managers likebun. - [EXTERNAL_DOWNLOADS]: The skill fetches the scaffolding package from the NPM registry and clones project templates from the vendor's official repositories.
- [SAFE]: No malicious patterns were detected. The skill's behavior is consistent with its stated purpose of providing a developer scaffolding environment using the vendor's own tools.
Audit Metadata