build-kernel-ts-sdk

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npm view within its included shell scripts (check-kernel-sdk-version.sh and scaffold-kernel-app.sh) to fetch version metadata for official packages from the public npm registry. These are legitimate, safe operations for dependency management.
  • [COMMAND_EXECUTION]: The provided scripts execute local developer tools like node, npm, and tsx to assist with project scaffolding and environment validation. These operations are intended for local development environments and are clearly documented.
  • [SAFE]: The skill follows security best practices by advising against hardcoding API keys, providing environment variable templates, and emphasizing proper resource cleanup using the platform's specific termination methods.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 03:52 PM
Security Audit — agent-trust-hub — build-kernel-ts-sdk