setup-sandcastle
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security issues detected. The skill follows best practices for environment setup, including user confirmation before performing actions and verifying existing configurations.
- [EXTERNAL_DOWNLOADS]: The skill installs the 'sandcastle' package from the npm registry (https://github.com/mattpocock/sandcastle). This is a well-known developer tool and the installation is handled through standard package managers.
- [COMMAND_EXECUTION]: The skill executes shell commands to check the local environment (
npx sandcastle --version) and verify successful setup (runningechoinside the created sandbox). These operations are restricted to the primary purpose of the skill and do not present a security risk.
Audit Metadata