dev
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
scripts/boot.sh,scripts/status.sh,scripts/stop.sh) to manage the lifecycle of various development tools, includingportless,emulate, andagent-browser. It handles background process execution and implements a recursive process tree cleanup usingpgrep -Pandkillsignals. - [EXTERNAL_DOWNLOADS]: The skill checks for and suggests the installation of several external dependencies via package managers (npm, brew), including
portless,agent-browser,emulate,jq, andtailscale. It also usesnpxto execute thewait-onutility for health checking the dev server. - [SAFE]: The skill demonstrates secure coding practices such as atomic state file writes, strict input sanitization for git branch slugs, and comprehensive prerequisite verification before starting any services. It explicitly warns users when using the
--funnelmode, which exposes the local development server to the public internet.
Audit Metadata