config-new-module

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/create-module.js executes shell commands using node:child_process.spawnSync. Specifically, it runs npm install, npm run build, and npm run test. These operations are central to the skill's purpose of project scaffolding and include strict regex validation for module names and namespaces to prevent shell injection.- [EXTERNAL_DOWNLOADS]: Execution of the scaffolding script triggers npm install, which downloads dependencies from the public npm registry. The script also hardcodes the addition of ts-node@^10.9.2 to the root project's dependencies and includes templates for new modules that depend on jest, ts-jest, and typescript.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:47 PM
Security Audit — agent-trust-hub — config-new-module