javascript-typescript-typescript-scaffold
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard CLI tools (npm, pnpm, git) to initialize and scaffold project structures. These are legitimate operations for a scaffolding tool.
- [EXTERNAL_DOWNLOADS]: Includes commands to download standard scaffolding tools and dependencies (e.g., pnpm, next-app, vite) from official package registries.
- [CREDENTIALS_UNSAFE]: The skill includes a .env.example file with generic placeholders like 'your-secret-key' and local database URLs. This is a recommended practice to guide users on where to place secrets without exposing actual credentials.
Audit Metadata