perps-validate-multiproject

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a shell script and markdown documentation to assist developers in testing local changes to the @metamask/perps-controller package across different MetaMask repositories (Core, Mobile, and Extension). All identified actions are standard development workflows.- [SAFE]: The validation script (scripts/perps-validate.sh) incorporates robust error handling and defensive programming techniques, such as using set -euo pipefail and properly quoting variables to prevent word splitting or glob expansion issues.- [SAFE]: The script manages package linking through yalc and yarn, ensuring that validation is performed using local builds rather than registry versions. It includes safety mechanisms to snapshot and restore the user's development environment, preventing loss of work.- [SAFE]: Tool resolution (e.g., finding the yalc binary) is handled transparently and checks established developer paths, defaulting to user-specified environment variables where provided. No suspicious execution or obfuscation patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 07:59 PM
Security Audit — agent-trust-hub — perps-validate-multiproject