make-app-permission
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Node.js scripts in the
scripts/directory that utilizechild_process(specificallyexecFileSyncandspawnSync) to run audits and synchronization tests. These are standard developer tools for local project maintenance. - [DYNAMIC_EXECUTION]: The
permission-conformance-suite.mjsscript uses dynamic imports to load a host adapter module provided by the user. This functionality is intended to allow the developer to test their own local code against the skill's permission contract. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile suggests usingnpx skills update qfeius/make-platform-skillsto keep platform-specific guidelines updated. This command targets a repository belonging to the skill's author ('qfeius') and is a standard method for managing dependencies within this ecosystem. - [SAFE]: The skill's primary focus is on providing technical references and heuristic static analysis tools for developers. The code implements these features using standard Node.js APIs without any signs of obfuscation or malicious intent.
Audit Metadata