xref
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
xrefutility from the official Vercel Labs repository on GitHub. - [COMMAND_EXECUTION]: Executes the
xrefcommand to crawl GitHub repositories via the GitHub API and manages local snapshots stored in the~/.xref/directory. - [COMMAND_EXECUTION]: Provides an optional clustering feature that allows the CLI to shell out to recognized external models (Claude or Codex) for semantic analysis of repository data.
Audit Metadata