emulate-seed
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and documentation focus on teaching the user how to use the 'emulate' tool by Vercel Labs. It explicitly includes security guidance in 'rules/auth-tokens.md' and 'rules/seed-config.md', warning users against hardcoding real credentials and demonstrating how to use seeded token names for testing.
- [SAFE]: The utility script 'scripts/auto-discover.sh' performs local file operations using 'jq' to scan 'package.json' and map dependencies to emulator services. It does not perform network operations, use arbitrary command execution, or access sensitive system paths.
- [SAFE]: All external downloads and dependencies (e.g., 'emulate', '@emulators/*') originate from trusted sources associated with Vercel Labs.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were detected. A small Base64 string found in 'references/upstream-github.md' decodes to benign text ('hello').
Audit Metadata