archiver
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for the well-known 'archiver' Node.js package. The installation instructions (
npm install archiver) and usage patterns follow standard development practices for archiving files, directories, and streams. - [EXTERNAL_DOWNLOADS]: The skill documents the installation of the 'archiver' package from the official npm registry, which is a standard and expected operation for this library's purpose.
- [COMMAND_EXECUTION]: Shell commands are limited to standard package installation (
npm install archiver). The JavaScript examples demonstrate standard file system operations (fs.createReadStream,fs.createWriteStream) and glob matching, all within the context of generating archives. - [DATA_EXFILTRATION]: While the skill demonstrates how to stream archives to an HTTP response (
res.attachment), this is presented as a legitimate use case for a web server providing a download feature. No suspicious network operations or unauthorized data transmission patterns were found.
Audit Metadata