cli-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive educational resource for building Node.js command-line interfaces. It provides guidance on architecture, dependency management, and distribution using standard industry tools.
- [COMMAND_EXECUTION]: The skill mentions the use of
child_process.spawnandexecSyncwithin the context of testing CLI tools and implementing multi-binary architectures. These are presented as standard patterns for Node.js development and do not involve executing untrusted or remote commands. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and well-known repositories from trusted services, including the official npm documentation (
docs.npmjs.com) and popular open-source projects on GitHub (e.g., Commander.js, Yargs). These references are informational and do not involve downloading or executing malicious payloads. - [PRIVILEGE_ESCALATION]: The skill suggests using
chmod +xto ensure CLI binaries are executable. This is a standard and necessary step for script distribution on Unix-like systems and does not represent a malicious escalation of privileges.
Audit Metadata