audit-allow-builds
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for auditing
allowBuildsinpnpm-workspace.yaml, which is a security best practice for managing supply-chain risks. - [COMMAND_EXECUTION]: Executes standard package management commands like
pnpm why,pnpm audit,pnpm install, andnpm view. These are routine development operations. - [EXTERNAL_DOWNLOADS]: References external security tools and documentation from well-known and trusted providers including pnpm, Socket, and StepSecurity. These are documented neutrally as sources for security intelligence and verification.
- [SAFE]: The network operations are limited to fetching package information from the official npm registry (
npm view) and checking vulnerabilities via official audit commands (pnpm audit).
Audit Metadata