vibecode-production-qa-validator
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several bash utility functions (e.g.,
qa:code,qa:build,qa:test) that execute standard development commands likenpm run build,npm test, andnpx eslintto verify application integrity. - [COMMAND_EXECUTION]: It provides a command to create a
.git/hooks/pre-commitfile, which automates the execution of type-checking and linting before git commits are finalized. - [EXTERNAL_DOWNLOADS]: Uses
curlto perform network requests against a user-definedPROD_URL. These requests are used to validate HTTP status codes, security headers (HttpOnly, Secure, SameSite), and SEO assets like sitemaps and Open Graph images. - [SAFE]: Includes security-enhancing logic that greps the local codebase for hardcoded secrets, database connection strings, and the use of dangerous patterns like
dangerouslySetInnerHTMLwithout sanitization. - [COMMAND_EXECUTION]: Utilizes Python 3 one-liners to perform safe, local parsing of XML sitemaps and JSON API responses for validation purposes.
Audit Metadata