shadscan-pre-commit
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill adds
shadscanandhuskyas development dependencies to the project, downloading them from the standard npm registry using the detected package manager. - [COMMAND_EXECUTION]: Executes shell commands via the local package manager to run audits, update configuration files, and verify the success of the pre-commit hook installation.
- [REMOTE_CODE_EXECUTION]: Uses the
npxutility (or equivalent) to execute the latest version ofshadscandirectly from the registry for an initial baseline score calculation if the tool is not yet installed locally.
Audit Metadata