rayfin-getting-started
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill instructs the agent to execute shell commands such as
npx,npm create, andrayfin initto set up new projects. This is the primary intended purpose of the skill and uses standard development workflows. - [Remote Package Execution]: The instructions utilize
npx -y @microsoft/create-rayfin@latest, which downloads and executes the latest version of the scaffolding tool from the npm registry. This is a common pattern for initialization tools and targets the vendor's official package. - [External Source Reference]: The skill references an official Microsoft GitHub repository (
https://github.com/microsoft/awesome-rayfin) as a template source. As this is a well-known service and belongs to the skill's authoring organization, it is considered a safe and standard reference for project templates.
Audit Metadata