build-raycast-script-command

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely instructional and provides templates for users to create their own Raycast scripts. It correctly identifies the scope and fit for Raycast Script Commands, distinguishing them from full extensions.
  • [SAFE]: Security best practices are encouraged, such as using set -euo pipefail in Bash, quoting variables to prevent shell injection, and guarding sys.argv access in Python to prevent index errors.
  • [SAFE]: External references in references/sources/source-map.md point to official Raycast domains and repositories (github.com/raycast, manual.raycast.com), which are well-known and trusted sources.
  • [SAFE]: No obfuscation, data exfiltration, or malicious persistence mechanisms were detected. The skill promotes transparency by instructing users to document dependencies and handle missing tools with readable error messages.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 03:48 PM