senior-fullstack

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard developer utilities and educational content without any detected malicious intent or security vulnerabilities.
  • [COMMAND_EXECUTION]: The included Python scripts (code_quality_analyzer.py and project_scaffolder.py) perform local file system operations (reading files for analysis and writing boilerplate code) using standard library modules such as pathlib and os. They do not execute arbitrary shell commands or download/execute remote content.
  • [EXTERNAL_DOWNLOADS]: While the documentation and workflows describe using package managers like npm and pip to install project dependencies, the skill itself does not contain any automated remote code execution or unauthorized downloads.
  • [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The code quality analyzer uses regular expressions to detect secrets in the user's code for reporting purposes, but it does not transmit this data externally.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 04:18 PM
Security Audit — agent-trust-hub — senior-fullstack