ai-app

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard boilerplate commands for initializing Next.js projects using well-known tools like Bun and shadcn UI (e.g., bunx --bun shadcn@latest init).
  • [SAFE]: The skill explicitly instructs developers to store sensitive API keys in .env.local files, which is a standard security best practice to prevent credential leakage in version control.
  • [SAFE]: Included templates for 'Agent Dashboards' demonstrate implementing human-in-the-loop (HITL) patterns, specifically requiring user approval before executing sensitive operations like deleting files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 08:06 AM