review-logging-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
evlogpackage via npm and usesnpxto fetch the vendor's CLI tool (@evlog/cli) directly from the npm registry. - [REMOTE_CODE_EXECUTION]: Commands such as
npx evlog initandnpx evlog mapdynamically download and execute the vendor's CLI tool. These actions are intended for project initialization and coverage analysis, and the skill includes safeguards like suggesting dry-runs and requiring user confirmation before execution. - [COMMAND_EXECUTION]: The skill directs the agent to execute various shell commands to integrate the logging framework, including
evlog initto generate configuration andevlog mapto analyze the local codebase for logging coverage. These operations are core to the skill's purpose of improving project logging.
Audit Metadata