encore-getting-started
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to install the Encore CLI by downloading and executing scripts directly from the vendor's domain (
https://encore.dev/install.shandhttps://encore.dev/install.ps1). While piped execution is generally a high-risk pattern, these resources originate from the framework's official website and represent the vendor's standard installation method. - [COMMAND_EXECUTION]: Several shell commands are provided for common development tasks, such as creating a new application (
encore app create), running the local server (encore run), and managing databases (encore db shell). These are standard operational commands for the described toolset. - [DATA_EXPOSURE]: The instructions guide the user on how to handle authentication, including the use of an
ENCORE_AUTH_KEYenvironment variable. This is a standard practice for CLI-based service authentication and does not involve exfiltration of existing system secrets.
Audit Metadata