cli-developer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries for CLI development across multiple ecosystems.
- Node.js: References official npm packages including
commander,inquirer,chalk,ora,yargs, andcli-progress. - Python: References official PyPI packages including
typer,click,rich,questionary, andtqdm. - Go: References well-known Go modules from established repositories such as
github.com/spf13/cobra,github.com/spf13/viper,github.com/charmbracelet/bubbletea, andgithub.com/fatih/color. - [COMMAND_EXECUTION]: The skill provides documentation on how to build and install CLI tools using standard build systems.
- Go: Includes a
Makefiletemplate for building cross-platform binaries using the standardgo buildtoolchain. - Node.js: Includes a
package.jsontemplate defining thebinentry point for distribution via npm. - [CREDENTIALS_UNSAFE]: The skill provides defensive guidance on secret management for CLI developers.
- Evidence: In
references/design-patterns.md, it recommends storing sensitive data in acredentials.jsonfile with restricted600permissions and includes logic for resolving configuration from multiple layers (flags, environment variables, and config files). - [SAFE]: The skill promotes several security and UX best practices, including TTY detection for colored output, adhering to the
NO_COLORstandard, graceful signal handling (SIGINT), and early input validation.
Audit Metadata