steedos-getting-started

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation hub for the Steedos platform, mapping various developer tasks to specialized skills and explaining the platform's metadata-driven architecture.
  • [COMMAND_EXECUTION]: Provides documentation for the steedos CLI tool, including commands for process management (start, restart), metadata synchronization (source:deploy, source:retrieve), and data operations (data:import, data:export). These commands are standard for the platform's development workflow.
  • [EXTERNAL_DOWNLOADS]: References the use of npx @steedos/validate for package validation and npx skills add for skill management. These are legitimate vendor-provided utilities from the '@steedos' scope.
  • [CREDENTIALS_UNSAFE]: Documents the steedos auth:login command structure using <username> and <password> placeholders. This is instructional documentation for the CLI tool and does not contain actual hardcoded secrets.
  • [DATA_EXPOSURE]: Describes the use of a PID file (.steedos.pid) in the local project directory for process tracking, which is a standard practice for development servers.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 05:46 AM
Security Audit — agent-trust-hub — steedos-getting-started