verify-build
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary tool
verify_buildexecutes a shell scriptscripts/verify_build.shwhich runs the standardnpm run buildcommand. The script includes validation logic to ensure thatnpmis installed and apackage.jsonfile exists in the target directory before attempting to build, preventing errors from invalid execution contexts. - [DYNAMIC_EXECUTION]: The skill includes a helper script
scripts/_skill_cli.pywhich contains arun_commandfunction. This function implements secure execution practices by explicitly disabling shell interpolation (shell=False) and resolving the command's absolute path viashutil.whichto mitigate PATH-manipulation and command injection vulnerabilities.
Audit Metadata