web-dev-setup

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands to install software, manage services, and configure the user environment.
  • Evidence: brew install pnpm, brew services start postgresql@17, brew install redis, and createdb "$USER" in SKILL.md.
  • Evidence: Execution of the bundled verification script sh "${CLAUDE_SKILL_DIR}/scripts/check.sh".
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs various development tools and databases through the Homebrew package manager.
  • Evidence: Installation of pnpm, postgresql@17, redis, and the API client bruno or postman via Homebrew Cask.
  • [SAFE]: The persistence mechanisms used (appending to ~/.zshrc for PATH updates and using brew services for database availability) are standard, non-malicious practices for configuring a developer machine and are explicitly disclosed in the skill's documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 06:29 PM
Security Audit — agent-trust-hub — web-dev-setup