harper-best-practices
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and architectural guidelines intended to teach agents how to build and deploy Harper applications. The instructions promote secure practices such as session-based authentication and token management.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted Node.js packages including
harperdb,vite,openai, andollama. It also references@harperfast/vite-plugin, which is a resource owned by the skill's author. These dependencies are standard for the described application use cases (database management, AI embeddings, and web serving). - [COMMAND_EXECUTION]: The documentation provides examples of shell commands for project initialization (
npm create harper), environment management (dotenv), and deployment via the Harper CLI. These are standard development workflow commands and do not involve suspicious or obfuscated execution patterns.
Audit Metadata