review-logging-patterns

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the evlog package via npm and uses npx to fetch the vendor's CLI tool (@evlog/cli) directly from the npm registry.
  • [REMOTE_CODE_EXECUTION]: Commands such as npx evlog init and npx evlog map dynamically download and execute the vendor's CLI tool. These actions are intended for project initialization and coverage analysis, and the skill includes safeguards like suggesting dry-runs and requiring user confirmation before execution.
  • [COMMAND_EXECUTION]: The skill directs the agent to execute various shell commands to integrate the logging framework, including evlog init to generate configuration and evlog map to analyze the local codebase for logging coverage. These operations are core to the skill's purpose of improving project logging.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 04:03 PM