search-first

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a structured methodology for research and decision-making, encouraging the use of existing, battle-tested solutions instead of implementing redundant code.- [EXTERNAL_DOWNLOADS]: The workflow references searching and adopting libraries from well-known services including npm, PyPI, and GitHub. These are standard developer resources.- [COMMAND_EXECUTION]: The instructions involve executing local search tools like rg (ripgrep) to inspect existing code and package managers like npm or pip to install dependencies. These operations are consistent with the skill's stated purpose of managing project dependencies.- [DATA_EXPOSURE_EXFILTRATION]: The skill suggests checking local configuration files such as ~/.claude/settings.json to identify active MCP servers. This is a legitimate step for the agent to understand its available capabilities and avoid duplication.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 07:42 AM
Security Audit — agent-trust-hub — search-first