cli-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified in this skill. The instructions and commands provided are consistent with the stated purpose of performing static code analysis.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx polyscan@latest, which fetches the latest version of thepolyscanpackage from the official NPM registry for execution. This is a standard and well-known method for using Node.js-based CLI tools. - [COMMAND_EXECUTION]: The skill provides examples of running the
polyscanCLI andjqfor processing JSON output. These commands are executed within the user's project context to analyze source code and do not involve unauthorized privilege escalation or persistence mechanisms.
Audit Metadata