picomatch
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the official API of the
picomatchlibrary, which is a legitimate utility for path matching and globbing. No command execution, data exfiltration, or obfuscation patterns were identified. - [EXTERNAL_DOWNLOADS]: The skill provides installation instructions via
npm install picomatch, which points to a well-known, legitimate package on the official NPM registry. - [COMMAND_EXECUTION]: The installation step is a standard developer command and does not constitute a security risk within this context.
Audit Metadata