setup-weaverse-project
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Uses
npxto download the latest versions of@weaverse/cliandshopifyCLI tools from the public npm registry for project scaffolding. - [COMMAND_EXECUTION]: Executes shell commands for environmental discovery (Node.js, Git, GitHub CLI) and project initialization, including repository setup and development server management. It also executes a local Node.js script to generate a cryptographically secure random session secret.
- [REMOTE_CODE_EXECUTION]: Runs remote packages via
npx, including the Weaverse CLI and the Weaverse Model Context Protocol (MCP) server for future project interactions. - [DATA_EXFILTRATION]: Performs authorized GitHub repository creation and environment variable management using the
ghCLI; no evidence of unauthorized data transfer to unknown external domains was found.
Audit Metadata