edit-app

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Automated Command Execution: The skill uses the Bash tool to perform project discovery, check for environment drift, and run verification scripts. While the execution of shell commands is a powerful capability, it is used here to maintain app health and verify generated code within a specific, resolved project directory.
  • External Package Installation: The skill automates the installation of Node.js dependencies using npm when users request specific UI components. This involves downloading code from an external registry, which is mitigated by requiring exact version pinning and performing a post-installation 'package-content gate' to verify that the package does not include unauthorized native code.
  • Data Privacy Protocols: In its Application Insights configuration flow, the skill explicitly restricts the collection of sensitive information. It forbids the logging of personal identifiers, tokens, operation payloads, or full URLs, which helps prevent the accidental exfiltration of sensitive data to telemetry services.
  • Structured Quality Gates: All modifications are subject to verification gates, including TypeScript compilation and custom validators for screen quality. This multi-step process ensures that automated edits are checked for errors and follow established security and quality standards before completion.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 07:26 AM