map
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various local shell commands using Bun. These include
bun installfor dependency management,bun run devto start a local Vite server, and several utility scripts likerender-mermaid.mjsfor diagram rendering andupdate.tsfor file content synchronization. These operations are standard for a local development and visualization tool. - [EXTERNAL_DOWNLOADS]: The skill relies on standard package managers (Bun/NPM) to download dependencies from official registries (npmjs.org). It uses legitimate libraries such as
beautiful-mermaid,@pierre/diffs, and@pierre/treesfor code visualization and tree structures. These downloads are consistent with the skill's stated purpose. - [DATA_EXPOSURE]: The script
scripts/sync-file-map.tsis designed to read file contents from the local filesystem to embed them into the generated map. This access is explicitly limited to paths defined by the agent in theFILE_MAPconfiguration and is the primary function of the skill (codebase mapping). The data remains within the generated local map file.
Audit Metadata