dev-server
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and setup instructions for the Editframe dev-server integration. It references official '@editframe' scoped npm packages and the 'editframe.com' domain, which are consistent with the provided author context.
- [COMMAND_EXECUTION]: The skill includes shell command examples for setting debug environment variables and sending feedback via 'curl'. These are documented as manual steps for the developer and do not contain obfuscation or malicious intent. The feedback mechanism explicitly warns against including secrets or personal data.
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading a runtime bridge from 'editframe.com/agent'. This is a neutral reference to a vendor-provided tool necessary for the skill's primary purpose.
- [CREDENTIALS_UNSAFE]: The skill references environment variables like 'EDITFRAME_API_KEY' and 'EF_TOKEN' in code examples but uses placeholders and standard practices (like '.env' files) for secret management, which is considered safe.
Audit Metadata