verify-cli
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to build and test the CLI. Specifically, it uses
pnpmto build the SDK and CLI and then runs the built CLI usingnode dist/index.js. These are standard development tasks within a local monorepo environment (apps/mpak). - [DATA_EXPOSURE]: The skill interacts with the local configuration at
~/.mpak/config.jsonviaconfig set,get,list, andclearcommands. This is used for smoke testing the configuration management logic and does not involve accessing sensitive system credentials (e.g., SSH, AWS). - [REMOTE_CODE_EXECUTION]: The skill uses
bundle pullandskill pullto download test packages to/tmp/. While these involve network operations to a production registry, the resources used (@nimblebraininc/echo,@nimblebraininc/skill-author) are provided by the vendor, and the downloads are not executed by the skill.
Audit Metadata