build-kernel-ts-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for building browser automation apps. All remote resources and dependencies, such as
@onkernel/sdk,@onkernel/managed-auth-react, and@onkernel/cli, are vendor-owned resources from 'yigitkonur'. - [SAFE]: The shell scripts (
scripts/check-kernel-sdk-version.shandscripts/scaffold-kernel-app.sh) use standard package manager commands (npm view,npm install) and Node.js for metadata processing. These are routine development tasks and do not involve untrusted remote code execution. - [SAFE]: The skill emphasizes secure credential management, explicitly instructing users to read
KERNEL_API_KEYfrom environment variables rather than hardcoding it. Scaffolding scripts generate.env.examplefiles with placeholders to prevent accidental credential leakage. - [SAFE]: References to third-party integrations like Playwright, Stagehand, Puppeteer, and Zod are to well-known, trusted development libraries and services.
- [SAFE]: The
kernel.browsers.playwright.executeandkernel.browsers.processAPIs described are core features of the Kernel platform, allowing code execution within a remote unikernel VM for performance; these are documented as intended platform behavior.
Audit Metadata