build
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration files, scene templates, and assets from
cdn.img.ly, which is the official Content Delivery Network of the skill author (imgly). - [COMMAND_EXECUTION]: Includes a utility script (
transpile-to-js.mjs) used during the project scaffolding process to convert TypeScript starter kits into JavaScript. This is a standard developer tool that operates locally on the user's project directory. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive license keys through environment variables (
VITE_CESDK_LICENSE) rather than hardcoding them, following industry security best practices.
Audit Metadata