nuxt-core
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The templates/init-nuxt-v4.sh script installs several external Node.js packages using npm install. These include official Nuxt modules such as @nuxt/ui, @nuxt/image, @nuxt/fonts, and @nuxt/content, as well as Cloudflare integration tools like @nuxthub/core. All identified dependencies are well-known and standard within the Nuxt development ecosystem.
- [COMMAND_EXECUTION]: The skill includes a shell script (templates/init-nuxt-v4.sh) and various CLI commands in SKILL.md for project lifecycle management. These commands use standard tools including npm, bun, npx, and wrangler for initialization, building, and deployment.
- [SAFE]: The skill implements secure patterns for secret management. The templates/nuxt.config.ts file includes a validation helper to ensure required environment variables are present in production without hardcoding sensitive values, adhering to security best practices.
Audit Metadata