cli-developer
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or security vulnerabilities were identified in the skill's instructions or reference materials. The content is purely instructional and aimed at assisting in the development of CLI applications.
- [EXTERNAL_DOWNLOADS]: The skill references and suggests the installation of widely-used, industry-standard packages such as
commander,yargs,click,typer, andcobra. These are recognized as safe, well-known libraries from official package registries. - [COMMAND_EXECUTION]: Includes code snippets demonstrating how to build and structure CLI commands and handle subcommands. These are provided as educational templates for developers and do not involve the execution of suspicious or hidden shell commands by the agent.
- [CREDENTIALS_UNSAFE]: Correctly advises on the secure management of local credentials by recommending restricted file permissions (e.g.,
600forcredentials.json), which is a standard security best practice for command-line tool development.
Audit Metadata