dev-implementation
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx ai-devkit@latest, which is a standard Node.js package execution method for development tooling. While this downloads a package at runtime, it targets a specific developer toolkit consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill executes shell commands using
npxfor linting and task validation (npx ai-devkit@latest lint). These are functional commands for the development lifecycle and do not involve untrusted input or risky operations. - [DATA_EXPOSURE]: The skill reads local project configuration files (
.ai-devkit.json) and documentation files (docs/ai) to gather context for implementation tasks. This is restricted to the local workspace and is necessary for its function as a development assistant.
Audit Metadata