drupal-theme

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The bootstrap script bin/magoo fetches the Magoo component catalog from the author's GitHub repository at https://github.com/ivanboring/magoocomponentui. This download is used to provide the theme assembly functionality.
  • [REMOTE_CODE_EXECUTION]: The skill executes the downloaded CLI tool by running npm install in the cached directory and then invoking scripts/theme-cli.mjs using Node.js. This execution is part of the skill's primary function to build themes.
  • [COMMAND_EXECUTION]: The bin/magoo script uses execFileSync to run local and downloaded commands. It passes user-provided arguments safely as an array, which prevents traditional shell injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 03:28 PM
Security Audit — agent-trust-hub — drupal-theme