native-sdk

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Package Installation: The instructions mention the installation of the @native-sdk/cli package using npm. This is a standard method for developers to acquire the necessary command-line tools to interact with the Native SDK environment.
  • CLI-Driven Context Acquisition: The skill encourages the agent to use the native skills get commands to fetch current implementation guidelines. This pattern allows the agent to access the most relevant and up-to-date documentation directly from the local development environment.
  • Tool Access Scoping: The skill's configuration limits the agent's executable commands to the native CLI and the project's specific npm package, which aligns with the principle of least privilege for task execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 09:59 PM
Security Audit — agent-trust-hub — native-sdk