rayfin-getting-started

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill instructs the agent to execute shell commands such as npx, npm create, and rayfin init to set up new projects. This is the primary intended purpose of the skill and uses standard development workflows.
  • [Remote Package Execution]: The instructions utilize npx -y @microsoft/create-rayfin@latest, which downloads and executes the latest version of the scaffolding tool from the npm registry. This is a common pattern for initialization tools and targets the vendor's official package.
  • [External Source Reference]: The skill references an official Microsoft GitHub repository (https://github.com/microsoft/awesome-rayfin) as a template source. As this is a well-known service and belongs to the skill's authoring organization, it is considered a safe and standard reference for project templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 05:16 AM
Security Audit — agent-trust-hub — rayfin-getting-started