drupal-theme
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The bootstrap script
bin/magoofetches the Magoo component catalog from the author's GitHub repository athttps://github.com/ivanboring/magoocomponentui. This download is used to provide the theme assembly functionality. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded CLI tool by running
npm installin the cached directory and then invokingscripts/theme-cli.mjsusing Node.js. This execution is part of the skill's primary function to build themes. - [COMMAND_EXECUTION]: The
bin/magooscript usesexecFileSyncto run local and downloaded commands. It passes user-provided arguments safely as an array, which prevents traditional shell injection vulnerabilities.
Audit Metadata