senior-fullstack
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard developer utilities and educational content without any detected malicious intent or security vulnerabilities.
- [COMMAND_EXECUTION]: The included Python scripts (
code_quality_analyzer.pyandproject_scaffolder.py) perform local file system operations (reading files for analysis and writing boilerplate code) using standard library modules such aspathlibandos. They do not execute arbitrary shell commands or download/execute remote content. - [EXTERNAL_DOWNLOADS]: While the documentation and workflows describe using package managers like
npmandpipto install project dependencies, the skill itself does not contain any automated remote code execution or unauthorized downloads. - [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The code quality analyzer uses regular expressions to detect secrets in the user's code for reporting purposes, but it does not transmit this data externally.
Audit Metadata