opt-editor-install
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the installation and maintenance of the @reopt-ai/opt-editor package. It correctly handles GITHUB_TOKEN for registry authentication using environment variable references in .npmrc, following development best practices.
- [COMMAND_EXECUTION]: Employs standard CLI tools including package managers (npm, bun) and node.js commands to perform environment diagnostics and dependency management.
- [EXTERNAL_DOWNLOADS]: Retrieves library updates and version information from the official GitHub Packages registry (npm.pkg.github.com), which is a trusted and well-known service.
- [PROMPT_INJECTION]: The skill presents a low attack surface for indirect prompt injection, as it mostly processes structured registry data and uses predefined templates for code generation.
Audit Metadata