rork-local-dev

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local build and process management commands.
  • It uses bun run build to compile the source code.
  • It uses npx pm2 to manage the lifecycle of the local server process.
  • It executes a local shell script (scripts/smoke.sh) to perform smoke tests against the development server.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx pm2, which may download the PM2 package from the npm registry if it is not already cached locally. This is a standard behavior for Node.js development environments.
  • [DATA_EXFILTRATION]: The smoke.sh script uses curl to interact with localhost. These network operations are confined to the local machine and are used exclusively for verifying the health and status of the development server.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 07:11 PM
Security Audit — agent-trust-hub — rork-local-dev