next-campaigns-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functions involve standard file system operations and command execution for project initialization. It follows best practices by verifying and resolving project root paths and checking for existing folders before writing data.- [EXTERNAL_DOWNLOADS]: The skill downloads starter templates and scaffolding tools from official NextCommerceCo repositories. These resources are part of the vendor's ecosystem and are used as intended for project setup.- [COMMAND_EXECUTION]: Uses
npmandnpxto install dependencies and execute the campaign initialization script. These operations are restricted to the local environment and are standard for Node.js-based development workflows.- [CREDENTIALS_UNSAFE]: While the skill handles an API key, it does so as a configuration step requested by the user. TheREADME.mdexplicitly warns the user that this key is stored in plain text in the project's local config files, which is expected behavior for the specified technology stack.
Audit Metadata