taruvi-refine-frontend
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local utility script
scripts/validate-resource-map.js. This script performs static analysis on the consuming React application to extract resource names fromsrc/App.tsxorsrc/main.tsx. - [EXTERNAL_DOWNLOADS]: The validation script performs network requests using the Node.js
http/httpsmodules to fetch datatable definitions from the Taruvi API. The API endpoint is determined by user-provided environment variables or CLI arguments. - [DATA_EXFILTRATION]: The validation script transmits an authentication token to the specified Taruvi API endpoint. As this is a standard developer tool used to verify infrastructure mapping against the vendor's own API, this behavior is consistent with the skill's stated purpose and represents normal vendor functionality.
Audit Metadata