build-kernel-ts-sdk

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive instructions for building browser automation apps. All remote resources and dependencies, such as @onkernel/sdk, @onkernel/managed-auth-react, and @onkernel/cli, are vendor-owned resources from 'yigitkonur'.
  • [SAFE]: The shell scripts (scripts/check-kernel-sdk-version.sh and scripts/scaffold-kernel-app.sh) use standard package manager commands (npm view, npm install) and Node.js for metadata processing. These are routine development tasks and do not involve untrusted remote code execution.
  • [SAFE]: The skill emphasizes secure credential management, explicitly instructing users to read KERNEL_API_KEY from environment variables rather than hardcoding it. Scaffolding scripts generate .env.example files with placeholders to prevent accidental credential leakage.
  • [SAFE]: References to third-party integrations like Playwright, Stagehand, Puppeteer, and Zod are to well-known, trusted development libraries and services.
  • [SAFE]: The kernel.browsers.playwright.execute and kernel.browsers.process APIs described are core features of the Kernel platform, allowing code execution within a remote unikernel VM for performance; these are documented as intended platform behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:26 PM