onboardingV2

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs specialized sub-skills (e.g., sdk-install, mcp-configure) from the official LaunchDarkly GitHub repositories using the npx skills add command.
  • [COMMAND_EXECUTION]: The skill automates the installation of LaunchDarkly SDKs by executing standard package manager commands (such as npm install, pip install, or dotnet add package) based on the detected project environment.
  • [DATA_EXFILTRATION]: The skill manages sensitive SDK keys and configuration data, but it includes explicit safeguards such as verifying the presence of .env files in .gitignore, using placeholders for users without accounts, and providing direct dashboard links to avoid manual key handling in the chat interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 10:49 PM
Security Audit — agent-trust-hub — onboardingV2