verify-10x-cli

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The verify.sh script executes CLI commands in a controlled, isolated scratch project directory to verify product behavior. This execution is limited to the local environment and the tool being tested.
  • [EXTERNAL_DOWNLOADS]: The skill makes a read-only request to the official npm registry (registry.npmjs.org) to perform a version check. This targets a well-known service and is a standard operation for development tooling.
  • [DATA_EXPOSURE]: The skill manages authentication tokens in a private auth.json file within a temporary configuration directory. The script applies appropriate file permissions (chmod 600) and ensures the data is deleted when the verification run is completed.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes bun install to set up its local dependencies, which is the standard and expected method for managing a Bun-based development and testing workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 02:26 PM