verify-build

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's primary tool verify_build executes a shell script scripts/verify_build.sh which runs the standard npm run build command. The script includes validation logic to ensure that npm is installed and a package.json file exists in the target directory before attempting to build, preventing errors from invalid execution contexts.
  • [DYNAMIC_EXECUTION]: The skill includes a helper script scripts/_skill_cli.py which contains a run_command function. This function implements secure execution practices by explicitly disabling shell interpolation (shell=False) and resolving the command's absolute path via shutil.which to mitigate PATH-manipulation and command injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 03:38 AM
Security Audit — agent-trust-hub — verify-build