add-clidash
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The server executes CLI tools to fetch data for the dashboard. It uses
execFileto avoid shell-injection vulnerabilities and validates all substituted parameters against strict allowlists and regular expressions to ensure safe execution. - [DATA_EXFILTRATION]: While the tool reads local system data and CLI outputs, it only serves this information over the local loopback interface. There are no external network requests or exfiltration mechanisms detected.
- [SAFE]: The implementation follows security best practices, including robust path traversal defenses in the file viewer using
realpathSyncand mandatory HTML escaping in the markdown renderer to prevent XSS. The dashboard binds to 127.0.0.1 by default and has a zero-dependency design which minimizes the supply chain attack surface.
Audit Metadata