alspec

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the alignfirst package from the public NPM registry.
[REMOTE_CODE_EXECUTION]: The instruction npx -y alignfirst guide spec results in the execution of code downloaded from a remote source. This is the primary intended functionality of the skill to access the AlignFirst protocol.
[COMMAND_EXECUTION]: The skill executes shell commands to invoke the specified protocol guide.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 28, 2026, 07:46 AM