optimize-bundle-size

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell utilities such as unzip, du, ls, find, and grep to inspect local build artifacts and project structure. It also uses standard ecosystem tools like npm and eas (Expo Application Services) for exporting bundles and initiating builds.
  • [EXTERNAL_DOWNLOADS]: The skill includes a command to run depcheck@1.4.7 via npx. This is a well-known, widely used utility in the JavaScript ecosystem for identifying unused dependencies. The usage is pinned to a specific version, which is a security best practice.
  • [SAFE]: The skill explicitly includes a 'Build gate' warning, instructing the agent to only run production build commands after the user has confirmed account details and profile settings, mitigating the risk of accidental billable actions or use of production credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 04:32 PM