react-doctor
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx react-doctor@latestwhich downloads and executes thereact-doctorpackage from the official npm registry. This is standard behavior for Node.js development tools. - [COMMAND_EXECUTION]: The skill provides instructions for running command-line interface (CLI) tools such as
npx,git, andnpm. These are used as intended for auditing and managing code repositories. - [DATA_EXPOSURE]: The documentation transparently notes that the tool sends anonymous usage data and crash reports by default, providing explicit flags (
--no-score,--no-telemetry) to disable these features for privacy-sensitive environments.
Audit Metadata