first-time-user

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill performs directory exploration using standard commands such as ls *.md and ls docs/ to identify documentation entry points. This is consistent with its stated purpose of auditing the onboarding experience.
  • [COMMAND_EXECUTION]: Local project scripts are invoked via npm run (e.g., npm run audit:cli, npm run dev) to test the functionality and help documentation of CLI tools. These executions are scoped to the local environment and do not involve remote script downloads or privilege escalation.
  • [SAFE]: The persona-based instructions directing the agent to act as a 'confused newcomer' and follow documentation literally are legitimate techniques for UX simulation and do not attempt to bypass security filters or safety guidelines.
  • [SAFE]: The skill handles only non-sensitive data, creating realistic mock information for testing and saving reports to a local docs/audits/ directory. No network operations or sensitive file accesses were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 10:46 AM
Security Audit — agent-trust-hub — first-time-user