skills/djalmajr/skills/agile-pen/Gen Agent Trust Hub

agile-pen

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the @djalmajr/pen-capture package from GitHub Packages and installs the Playwright Chromium browser to support visual capture functionality.
  • Evidence: Found in SKILL.md and scripts/pen-capture.mjs wrapper instructions.
  • [COMMAND_EXECUTION]: The skill executes internal automation scripts and the shadcn CLI to manage the design system and project configuration.
  • Evidence: SKILL.md specifies running scripts/ads.mjs and scripts/pen-capture.mjs with Node or Bun, and using shadcn add for layout materialization.
  • [REMOTE_CODE_EXECUTION]: The skill leverages the shadcn registry to fetch and install renderable components into a temporary environment.
  • Evidence: SKILL.md documentation for the materialize command, which uses npx, pnpm dlx, or yarn dlx to run the shadcn CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 12:02 PM
Security Audit — agent-trust-hub — agile-pen