waitlist
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on scaffolding boilerplate code for a common web application feature. The logic for database schema creation, API routes, and frontend components is standard and does not include any malicious behavior.
- [COMMAND_EXECUTION]: Uses a safe, read-only command (
catpiped togrep) to inspect the project'spackage.jsonfor environment detection during the setup phase. - [DATA_EXPOSURE]: No hardcoded credentials or sensitive data exposure was found. The skill correctly demonstrates using environment variables (
RESEND_API_KEY,ADMIN_SECRET) for managing secrets. - [DYNAMIC_EXECUTION]: A dynamic
requirecall is used for the built-in Node.jscryptomodule. Since the module name is a static string, this is a safe and standard pattern in JavaScript environments.
Audit Metadata