setup-shadowfax
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute Node.js scripts (
init.jsandinstall-cursor.js) to perform initialization tasks. This is standard behavior for setup-oriented skills. - [SAFE]: The logic in
scripts/init.jsis limited to searching for a plugin root directory and creating local files within the current working directory's.shadowfaxfolder. It uses standard Node.jsfsandpathmodules for legitimate file operations and contains no obfuscation, credential harvesting, or unauthorized remote execution patterns.
Audit Metadata