build-kernel-ts-sdk

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes utility shell scripts (scripts/check-kernel-sdk-version.sh and scripts/scaffold-kernel-app.sh) designed to assist developers with environment verification and project bootstrapping. These scripts execute standard commands such as npm and node to manage package versions and generate project files.
  • [EXTERNAL_DOWNLOADS]: Instructions guide users to install dependencies from the official npm registry, including the vendor's own @onkernel/sdk and the well-known playwright library.
  • [REMOTE_CODE_EXECUTION]: The documentation describes the kernel.browsers.playwright.execute API. This feature allows for the execution of JavaScript code directly within the vendor's isolated browser VMs to eliminate network latency. This is an intended architectural feature of the Kernel platform and is used for automation tasks.
  • [SAFE]: No malicious patterns, obfuscation, unauthorized data exfiltration, or credential harvesting were detected. The skill follows best practices by instructing users to manage API keys via environment variables rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 10:40 PM
Security Audit — agent-trust-hub — build-kernel-ts-sdk