portaljs-new-portal
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a project template from the official Datopian GitHub repository (
datopian/portaljs) usingnpx tiged. This is a standard practice for project scaffolding and uses a trusted source. - [COMMAND_EXECUTION]: The skill uses
npm installandnpx tscto set up and verify the new project. These commands are executed within the newly created project directory as part of the intended setup process. - [COMMAND_EXECUTION]: The skill uses
perl -pito perform string substitutions on placeholder tokens (e.g., project name, description) within the scaffolded files. The instructions specify that values are escaped before substitution to prevent command injection or broken syntax.
Audit Metadata