svelte-code-writer
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the @sveltejs/mcp package from the official NPM registry via npx. This is a standard operation for Svelte development tools and originates from a trusted official organization.
- [COMMAND_EXECUTION]: Provides CLI commands for documentation lookup and code analysis. The instructions include appropriate security guidance, such as escaping the $ character (e.g., $state) to prevent shell variable substitution or accidental command injection when passing Svelte runes through the terminal.
Audit Metadata