do-create-cli
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill generates CLI tools that follow the 'llcli' pattern, a manual argument parsing approach that minimizes external dependencies and reduces the attack surface of the generated software.
- [SAFE]: Configuration management for the generated tools follows safe practices by externalizing secrets to environment variables or local fallback files (~/.agents/.env) rather than hardcoding credentials.
- [SAFE]: External dependencies referenced in the workflows and research documentation (such as Commander.js, Zod, and Vitest) are reputable, well-known packages from official registries.
- [SAFE]: File operations and command routing patterns used in the templates focus on deterministic behavior and strict type safety, which mitigates common logic-based vulnerabilities.
Audit Metadata