use-template
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execSyncto runnpm installwithin the directory of the newly cloned template. This is used to install the necessary dependencies defined in the template'spackage.jsonfile. - [DATA_EXFILTRATION]: The skill initiates a network request using the
httpsmodule togallery-telemetry.up.railway.app. This request transmits usage data (template ID and event type) to an external server. While the telemetry is described as anonymous and relates to the skill's functionality, the destination domain is not on the standard whitelist.
Audit Metadata