cli-developer

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries for CLI development across multiple ecosystems.
  • Node.js: References official npm packages including commander, inquirer, chalk, ora, yargs, and cli-progress.
  • Python: References official PyPI packages including typer, click, rich, questionary, and tqdm.
  • Go: References well-known Go modules from established repositories such as github.com/spf13/cobra, github.com/spf13/viper, github.com/charmbracelet/bubbletea, and github.com/fatih/color.
  • [COMMAND_EXECUTION]: The skill provides documentation on how to build and install CLI tools using standard build systems.
  • Go: Includes a Makefile template for building cross-platform binaries using the standard go build toolchain.
  • Node.js: Includes a package.json template defining the bin entry point for distribution via npm.
  • [CREDENTIALS_UNSAFE]: The skill provides defensive guidance on secret management for CLI developers.
  • Evidence: In references/design-patterns.md, it recommends storing sensitive data in a credentials.json file with restricted 600 permissions and includes logic for resolving configuration from multiple layers (flags, environment variables, and config files).
  • [SAFE]: The skill promotes several security and UX best practices, including TTY detection for colored output, adhering to the NO_COLOR standard, graceful signal handling (SIGINT), and early input validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 09:45 AM