cli-developer
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive reference guide for CLI development. It provides standard boilerplate and patterns for well-known frameworks like Cobra (Go), Commander/Yargs (Node.js), and Typer/Click (Python).
- [COMMAND_EXECUTION]: The provided code examples demonstrate common CLI operations such as argument parsing, file system interactions via standard libraries, and executing tests. These are integral to the skill's primary purpose of implementing developer tools.
- [EXTERNAL_DOWNLOADS]: The documentation references standard package managers (npm, pip, go) and established open-source libraries. It includes best practices for update checks and distribution without including suspicious remote execution patterns.
- [CREDENTIALS_UNSAFE]: The skill explicitly recommends security best practices for handling sensitive data, such as storing credentials in restricted files with '600' permissions (user read/write only).
- [DATA_EXFILTRATION]: No patterns of unauthorized data access or network exfiltration were detected. All network-related examples are contextualized as standard deployment or update-check tasks.
Audit Metadata