cli-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were identified in this skill. The instructions and commands provided are consistent with the stated purpose of performing static code analysis.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx polyscan@latest, which fetches the latest version of the polyscan package from the official NPM registry for execution. This is a standard and well-known method for using Node.js-based CLI tools.
  • [COMMAND_EXECUTION]: The skill provides examples of running the polyscan CLI and jq for processing JSON output. These commands are executed within the user's project context to analyze source code and do not involve unauthorized privilege escalation or persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 07:52 PM