audit-allow-builds

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for auditing allowBuilds in pnpm-workspace.yaml, which is a security best practice for managing supply-chain risks.
  • [COMMAND_EXECUTION]: Executes standard package management commands like pnpm why, pnpm audit, pnpm install, and npm view. These are routine development operations.
  • [EXTERNAL_DOWNLOADS]: References external security tools and documentation from well-known and trusted providers including pnpm, Socket, and StepSecurity. These are documented neutrally as sources for security intelligence and verification.
  • [SAFE]: The network operations are limited to fetching package information from the official npm registry (npm view) and checking vulnerabilities via official audit commands (pnpm audit).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 08:46 AM
Security Audit — agent-trust-hub — audit-allow-builds