Forked Package Management
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external Git repositories for package management. These targets (e.g.,
github.com/hackur/nova-menus,github.com/hackur/nova-medialibrary-bounding-box-field) are consistent with the skill author's identity and represent standard dependency management for forked software. - [COMMAND_EXECUTION]: The documentation includes numerous shell commands for
git,composer, and project-specific scripts (e.g.,./scripts/dev.sh). These are typical for developer operations and are used to manage local submodules, install dependencies, and update project state. - [REMOTE_CODE_EXECUTION]: While the skill involves downloading and installing code via
git cloneandcomposer install, these are standard development practices for the intended purpose of the skill. The sources are limited to the vendor's own repositories and official package registries.
Audit Metadata