create-agentic-app

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx create-agentic-app@latest to fetch and execute the project scaffolding tool from the NPM registry. It also manages the installation of standard dependencies via pnpm, npm, or yarn.
  • [COMMAND_EXECUTION]: Executes shell commands for environment discovery (node, git, docker), directory management, and running development lifecycle scripts such as db:migrate, build:ci, and dev.
  • [EXTERNAL_DOWNLOADS]: Integrates with trusted technology platforms including Vercel (for storage and hosting), Neon (for serverless database), OpenRouter (for AI SDK), and Polar (for payments). All references target official domains or repositories.
  • [SAFE]: Implements secure secret management by generating a cryptographically strong BETTER_AUTH_SECRET locally and instructing users to store keys in a .env file rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 02:43 AM
Security Audit — agent-trust-hub — create-agentic-app