starterkit-card
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to use the
npm viewcommand to verify the latest available version of the card component package before installation. - [EXTERNAL_DOWNLOADS]: The documentation directs the installation of the
@devopsnext/starterkit-card-componentpackage from the npm registry. It specifically recommends using exact versions (e.g.,pnpm add package@version) to mitigate risks associated with automatic minor/patch updates. - [DYNAMIC_EXECUTION]: A Node.js one-liner is provided to compute a SHA-256 fingerprint of the package's type definition file (
index.d.ts). This is used as a local integrity check to ensure the installed package matches the documented specification.
Audit Metadata