dev
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple command-line utilities to manage the development stack lifecycle.
- Evidence:
scripts/boot.shinvokesportless,emulate,agent-browser,git,tailscale, andjqto configure the environment and start services. - Evidence:
scripts/stop.shusespgrepandkillto perform a recursive process tree teardown in reverse boot order. - [INDIRECT_PROMPT_INJECTION]: The skill ingests project metadata to customize boot behavior and surface developer hints, creating a limited indirect injection surface.
- Ingestion points:
package.json,turbo.json, andpnpm-workspace.yamlare read inscripts/boot.shto detect dependencies and monorepo configurations. - Boundary markers: Absent.
- Capability inventory: Subprocess execution of development tools, local state file writes in
.claude/state/, and network configuration via Tailscale. - Sanitization: Employs
jqfor structured data extraction andtrfor branch-to-slug normalization to ensure data is handled safely. - [EXTERNAL_DOWNLOADS]: The skill references and uses external software packages to facilitate development workflows.
- Evidence:
scripts/boot.shusesnpx --yes wait-onto perform network-based health checks on the dev server. - Evidence: Documentation recommends global installation of
portless,emulate, andagent-browser(tools from the Vercel Labs ecosystem).
Audit Metadata