setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard package manager commands (npm, pnpm, yarn, or bun) to install development dependencies and initialize tools. These are routine operations for project configuration.
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs well-known, standard development packages (husky, lint-staged, prettier) from the official NPM registry. These are trusted industry-standard tools.
- [REMOTE_CODE_EXECUTION]: Uses
npx husky init, which is the official initialization command for the Husky package. No arbitrary remote script execution via curl/wget is detected. - [DATA_EXFILTRATION]: No network operations to non-whitelisted or suspicious domains are present. All network activity is confined to standard package management via the local package manager.
- [PROMPT_INJECTION]: No evidence of instructions attempting to bypass safety filters, override system prompts, or manipulate agent behavior.
Audit Metadata