cli-design

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely educational and instructional, providing code examples for standard CLI libraries like Commander.js, Click, Cobra, and Clap. All identified commands are standard development practices for building terminal applications.
  • [COMMAND_EXECUTION]: The skill contains a 'Companion check' section in SKILL.md that suggests running a directory listing (ls) to check for recommended skills. This is a common pattern for skill discovery within this framework and is considered benign.
  • [EXTERNAL_DOWNLOADS]: The README.md and SKILL.md files provide instructions for installing skills using npx skills add. These references point to the 'AbsolutelySkilled' organization, which matches the skill's own branding and intended distribution model.
  • [DATA_EXPOSURE]: The skill documents standard practices for configuration file locations (e.g., XDG Base Directory Specification). It correctly advises on the hierarchy of loading secrets from environment variables rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 02:05 PM
Security Audit — agent-trust-hub — cli-design