clade-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@claude-ai/sdkNode package via npm. The official Anthropic SDK package name on the public registry isanthropic. Recommending a non-standard package name can introduce a supply chain risk if a user installs an unverified package. - [COMMAND_EXECUTION]: The skill uses standard development commands such as
npm install,pip install, andnpx tsxto scaffold the project and run local testing scripts in watch mode. - [DATA_EXPOSURE]: The skill correctly implements security best practices by instructing users to create a
.envfile for credentials and immediately adding it to the.gitignorefile to prevent accidental exposure of API keys in version control.
Audit Metadata