seed-component-map
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a static analysis utility for a local development environment. It implements input validation for the component name to ensure it only contains expected characters and remains within a reasonable length (120 characters), mitigating potential injection or path traversal risks.- [DATA_EXFILTRATION]: The implementation script,
component-map.ts, contains no network-related code (nofetch,http, or socket operations). All data processing is confined to the local machine where the script is executed.- [COMMAND_EXECUTION]: While the skill involves executing a TypeScript script via thebunruntime, it follows secure practices by explicitly defining allowed scan roots and excluding sensitive directories such as.gitandnode_modulesfrom its search path.
Audit Metadata