cofounder-pre-flight-check
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled shell script
scripts/preflight.shto perform environment checks. This includes standardgitoperations (status, add, commit, pull, push) and checking for the presence of local CLI tools (podman,mise,gh).- [EXTERNAL_DOWNLOADS]: The skill performs a version check by fetching metadata from the vendor's official GitHub repository (locaweb/cofounder). This is used to notify the user of available updates and does not involve executing the fetched content. The provided update command usesmiseandnpxto update the skill package from the same vendor source.- [SAFE]: The git synchronization logic includes a proactive security check that detects and prevents the accidental committing or pushing of sensitive files (such as.env, private keys, and credential stores). This is a defensive best practice.
Audit Metadata