roadmap-setup
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local command using Node.js or a global CLI tool (
roadmapsmith) to generate integration files for the repository. - Evidence: The script targets
roadmap-skill/bin/cli.jsor theroadmapsmithbinary with thesetupargument. - Context: This execution is directly tied to the primary stated purpose of the skill (roadmap-setup) and uses hardcoded or local paths without untrusted input interpolation.
Audit Metadata