xy-toolchain
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install development packages from the @xylabs scope and standard registries (NPM), which is appropriate for a development toolchain skill.
- [COMMAND_EXECUTION]: Provides instructions for running project management commands (build, lint, test, compile) through the @xylabs/toolchain CLI and Vitest runner.
- [CREDENTIALS_UNSAFE]: Explicitly warns users against committing sensitive .npmrc files containing authentication tokens to version control, which aligns with security best practices.
Audit Metadata