setup-client-website
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools such as
npm,npx,git,gh, andgcloudto initialize the project, manage source control, and deploy resources to Google Cloud Platform. These operations align with the skill's intended purpose of website scaffolding and hosting. - [EXTERNAL_DOWNLOADS]: Fetches required dependencies from the NPM registry and interacts with established technology providers including GitHub, Google Cloud, PostHog, Vimeo, and Calendly. It specifically incorporates the author's own component library,
@m13v/seo-components, for site infrastructure. - [DATA_EXFILTRATION]: Accesses content from an existing website during the audit phase for the purpose of migrating assets and text to the new project. The extracted data is used locally within the generated Next.js application and hosted on the user's cloud infrastructure.
- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized privilege escalation was found. The skill follows best practices for secret management by using environment variables and GitHub Action secrets for sensitive credentials like GCP service account keys.
Audit Metadata