vibekit
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to automate development workflows.
scripts/add.shuses the GitHub CLI (gh api) to retrieve version information from the library's repository.- It triggers package installation commands (
pnpm install,npm install, oryarn install) to update the project's lockfile after modifying dependencies. - [EXTERNAL_DOWNLOADS]: The skill facilitates the inclusion of external source code into the project.
- It configures the project's
package.jsonto pull the@randroids-dojo/vibekitlibrary directly from a GitHub repository. - [DYNAMIC_EXECUTION]: The skill utilizes
node -ewithin its scripts to programmatically read and update the project'spackage.jsonfile. - This approach is used as a structured method for JSON manipulation to ensure the integrity of the project configuration.
Audit Metadata