iga-pages
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or security vulnerabilities were identified in the skill's instructions or referenced documentation.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official, vendor-owned packages including @iga-pages/cli, @iga-pages/agent, and @iga-pages/blob. It also references trusted third-party libraries such as Anthropic and LangChain, adhering to safe dependency management practices.
- [COMMAND_EXECUTION]: Shell commands are strictly limited to the iga CLI tool for project lifecycle management, such as building, deploying, and linking projects. These operations are transparent and scoped to the user's project directory.
- [CREDENTIALS_UNSAFE]: The skill provides secure guidance for authentication, supporting browser-based login and Device Code flows for interactive sessions, and IAM Access Keys for automation. It explicitly warns against committing sensitive .env.local files to version control, following industry-standard security protocols.
Audit Metadata