audit-bundle-size

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install rollup-plugin-visualizer via npm and utilizes npx to download and run @playwright/cli and source-map-explorer. These are established tools within the JavaScript ecosystem used for performance monitoring and testing.
  • [COMMAND_EXECUTION]: The skill triggers local build processes using npm run build and uses shell commands such as find, ls, and sort to inspect the generated assets in the dist directory. These operations are essential for the stated purpose of auditing bundle sizes.
  • [REMOTE_CODE_EXECUTION]: The agent is directed to execute remote tools using npx and to temporarily modify project configuration files (e.g., vite.config.ts) to enable analysis plugins. This behavior is standard for performance auditing and is constrained to the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:55 AM
Security Audit — agent-trust-hub — audit-bundle-size