lsp-index-engineer
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to install standard language server tools globally using
npm install -g. These include well-known tools liketypescript-language-serverandintelephense, which are essential for the skill's stated purpose of indexing code. - [EXTERNAL_DOWNLOADS]: Setup instructions involve downloading legitimate developer tools from official package registries. These resources are from well-known services and align with the primary mission of the skill.
- [REMOTE_CODE_EXECUTION]: The agent is designed to orchestrate and interact with external language server processes as subprocesses. This is the intended and necessary behavior for a Language Server Protocol specialist.
- [DATA_EXFILTRATION]: The skill architecture includes a local WebSocket and HTTP server (
graphd) to serve code intelligence data. While this involves network operations, it is localized and fundamental to the tool's functionality as a semantic index server.
Audit Metadata