ai-app
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard boilerplate commands for initializing Next.js projects using well-known tools like Bun and shadcn UI (e.g.,
bunx --bun shadcn@latest init). - [SAFE]: The skill explicitly instructs developers to store sensitive API keys in
.env.localfiles, which is a standard security best practice to prevent credential leakage in version control. - [SAFE]: Included templates for 'Agent Dashboards' demonstrate implementing human-in-the-loop (HITL) patterns, specifically requiring user approval before executing sensitive operations like deleting files.
Audit Metadata