local-first
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a knowledge base and architectural guide for local-first development. It includes technical references for common libraries like TanStack DB, ElectricSQL, PGlite, and Yjs.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing supplementary skills using
pnpm dlx skills add oakoss/agent-skills. This is a documented method for extending agent capabilities with resources provided by the same vendor ('oakoss'). - [COMMAND_EXECUTION]: Code snippets provided in the documentation are for educational purposes, demonstrating how to interact with browser APIs (IndexedDB, OPFS) and established sync engines. No malicious command execution patterns were found.
- [DATA_EXFILTRATION]: All network-related snippets (e.g., connectivity checks, audit logging) target relative paths or user-defined configuration endpoints consistent with the stated functionality of a local-first application framework.
Audit Metadata