cli-backend-testing
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to manage the local development lifecycle. This includes starting the server via
pnpm run dev:next, executing the CLI tool from source usingbun src/index.ts, and terminating local processes on port 3011 usinglsofandkill. These are standard development practices for the stated purpose. - [EXTERNAL_DOWNLOADS]: The skill performs local network requests using
curlto verify the availability of a development server hosted onlocalhost:3011. It does not attempt to download or execute code from external internet domains. - [CREDENTIALS_UNSAFE]: The skill checks for the existence of a local settings file at
lobehub/apps/cli/.lobehub-dev/settings.jsonto determine authentication status. It employs environment-specific configuration (LOBEHUB_CLI_HOME=.lobehub-dev) to ensure development credentials remain isolated within the project directory. No hardcoded secrets or sensitive exfiltration patterns were detected.
Audit Metadata