edit-offline-profile
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- Internal Script Execution: The skill executes local Node.js scripts (e.g.,
resolve-environment.js,dataverse-request.js) located within the plugin's root directory. These scripts perform the core logic of environment discovery and API interaction, which is standard for task-oriented workflows. - Dataverse API Interaction: The workflow includes authenticated GET, PATCH, and POST requests to Dataverse endpoints to retrieve, update, and publish offline profiles. These operations are restricted to the specific items identified in the project configuration.
- User Confirmation Checkpoint: A single-gate confirmation step is implemented using the
AskUserQuestiontool before any modifications are applied. This provides a clear summary of current versus proposed changes, allowing for manual verification. - Configuration and State Management: The skill maintains project state by reading from and writing to local files like
power.config.json,offline-profile.json, andmemory-bank.md. This behavior is consistent with the skill's purpose of managing local application development artifacts.
Audit Metadata