dribbble-reference-harvester
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash wrapper script
collect.shto execute a local Node.js CLI tool (src/cli.mjs). This is the intended functionality of the skill for harvesting references. - [EXTERNAL_DOWNLOADS]: The skill instructions include running
npm installto set up the necessary project dependencies from the official npm registry, which is a standard development practice.
Audit Metadata