primer

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to gather and summarize project context by reading local configuration files and database metadata. This is a legitimate development workflow automation.
  • [COMMAND_EXECUTION]: The skill uses the 'Bash' tool to execute standard development commands like npm run dev and npm run build. These are well-defined within the project's 'Golden Path' architecture.
  • [DATA_EXPOSURE]: While the skill reads sensitive project data (database tables, business logic), it does so using integrated MCP tools (Supabase, Next.js DevTools) for the purpose of generating a local summary for the user. No external data transmission or exfiltration patterns were identified.
  • [REMOTE_CODE_EXECUTION]: No patterns of downloading or executing code from external or untrusted sources were found.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 03:51 AM