verify-10x-cli
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
verify.shscript executes CLI commands in a controlled, isolated scratch project directory to verify product behavior. This execution is limited to the local environment and the tool being tested. - [EXTERNAL_DOWNLOADS]: The skill makes a read-only request to the official npm registry (
registry.npmjs.org) to perform a version check. This targets a well-known service and is a standard operation for development tooling. - [DATA_EXPOSURE]: The skill manages authentication tokens in a private
auth.jsonfile within a temporary configuration directory. The script applies appropriate file permissions (chmod 600) and ensures the data is deleted when the verification run is completed. - [REMOTE_CODE_EXECUTION]: The skill utilizes
bun installto set up its local dependencies, which is the standard and expected method for managing a Bun-based development and testing workflow.
Audit Metadata