software-devtools
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Mentions numerous established libraries for CLI and SDK development, including Commander.js, oclif, Cobra, clap, and Typer, as part of its architectural recommendations.
- [EXTERNAL_DOWNLOADS]: References a community GitHub repository (santifer/career-ops) as an example implementation for terminal dashboards.
- [CREDENTIALS_UNSAFE]: Provides guidance on secure credential management, specifically advocating for npm trusted publishing (OIDC) to avoid long-lived tokens in CI/CD workflows.
- [COMMAND_EXECUTION]: Outlines best practices for CLI design, including standard exit codes, argument handling, and support for non-interactive execution for automation.
- [INDIRECT_PROMPT_INJECTION]: Contains explicit advice for creating agent-friendly tools that avoid common vulnerabilities by implementing structured outputs and idempotent commands.
Audit Metadata