faf-expert

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install tools via npm install -g faf-cli and npx -y claude-faf-mcp@latest. These are standard installation methods for Node.js-based developer tools and are consistent with the skill's stated purpose of managing project context.
  • [COMMAND_EXECUTION]: The documentation provides several CLI commands (e.g., faf init, faf score, faf mcp install) for the agent to execute within the terminal environment to perform its tasks.
  • [REMOTE_CODE_EXECUTION]: The MCP server configuration utilizes npx -y claude-faf-mcp@latest, which downloads and executes the latest version of the specified package. While this involves running remote code, it is a documented feature of the Model Context Protocol (MCP) and is tied to the skill's core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 09:42 AM
Security Audit — agent-trust-hub — faf-expert