scaffold-nextjs
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for project initialization, file management, and deployment using standard tools like
npm,npx,git,gh, andvercel. - [EXTERNAL_DOWNLOADS]: The skill fetches several packages from the npm registry, including
agentation,ultracite,turbo, and@next/third-partiesto build the application environment. - [EXTERNAL_DOWNLOADS]: It references an external UI component registry at
ui.blode.coto download specialized component configurations during the UI setup phase. - [REMOTE_CODE_EXECUTION]: The workflow utilizes
npxto execute initialization scripts forcreate-next-app,shadcn,ultracite, and the Vercel CLI, which involves fetching and executing code from remote sources at runtime.
Audit Metadata