seed-component-map

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a static analysis utility for a local development environment. It implements input validation for the component name to ensure it only contains expected characters and remains within a reasonable length (120 characters), mitigating potential injection or path traversal risks.- [DATA_EXFILTRATION]: The implementation script, component-map.ts, contains no network-related code (no fetch, http, or socket operations). All data processing is confined to the local machine where the script is executed.- [COMMAND_EXECUTION]: While the skill involves executing a TypeScript script via the bun runtime, it follows secure practices by explicitly defining allowed scan roots and excluding sensitive directories such as .git and node_modules from its search path.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:21 PM