map

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute various local shell commands using Bun. These include bun install for dependency management, bun run dev to start a local Vite server, and several utility scripts like render-mermaid.mjs for diagram rendering and update.ts for file content synchronization. These operations are standard for a local development and visualization tool.
  • [EXTERNAL_DOWNLOADS]: The skill relies on standard package managers (Bun/NPM) to download dependencies from official registries (npmjs.org). It uses legitimate libraries such as beautiful-mermaid, @pierre/diffs, and @pierre/trees for code visualization and tree structures. These downloads are consistent with the skill's stated purpose.
  • [DATA_EXPOSURE]: The script scripts/sync-file-map.ts is designed to read file contents from the local filesystem to embed them into the generated map. This access is explicitly limited to paths defined by the agent in the FILE_MAP configuration and is the primary function of the skill (codebase mapping). The data remains within the generated local map file.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 06:55 PM