nuxt-core
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: Analysis of the provided files indicates the skill is a standard development resource for Nuxt 4. No malicious patterns, obfuscation, or unauthorized data access were detected. The author successfully implements standard project scaffolding and configuration templates.
- [EXTERNAL_DOWNLOADS]: The documentation and setup script (init-nuxt-v4.sh) utilize official package managers and CLI tools (npx, bunx, npm) to fetch framework dependencies. The skill explicitly recommends using security audit tools to verify packages before installation, demonstrating a security-conscious approach to supply chain risks.
- [COMMAND_EXECUTION]: The skill provides a shell script for project scaffolding. This script performs standard operations such as creating directories and generating configuration files (.gitignore, vitest.config.ts, wrangler.toml). It uses standard shell utilities for local development setup.
Audit Metadata