twombly
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the command
npx -y twombly@latest guidefor the agent to execute to start the tool setup process. - [REMOTE_CODE_EXECUTION]: The command utilizes
npxto download and run the latest version of thetwomblypackage from the official npmjs registry at runtime. - [EXTERNAL_DOWNLOADS]: The skill fetches the
twomblypackage from the well-known npmjs registry.
Audit Metadata