create-agent

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute npx @cognite/cli@latest. This is the intended purpose for bootstrapping projects using the official command-line interface provided by the vendor.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the @cognite/cli package from the npm registry at runtime. This is a standard practice for development tools to ensure the project is initialized with the most recent templates and configuration schemas.
  • [DATA_EXFILTRATION]: No unauthorized network operations or sensitive data access patterns were detected. The skill's operations are confined to the local project directory creation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 03:23 PM
Security Audit — agent-trust-hub — create-agent