permissions-and-system-prompts
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The check-lib.mjs library includes a runNode function that utilizes node:child_process.spawnSync to execute Node.js. This functionality is used by the runSelftest routine to validate the linter's logic against various test fixture scenarios.\n- [DYNAMIC_EXECUTION]: The importPackage function in check-lib.mjs dynamically loads Node.js modules using the import() statement. This is designed to load specific pinned versions of development dependencies, such as pngjs, from a local tooling directory.\n- [SAFE]: The skill implements a robust set of static analysis rules and test utilities. It performs local file system operations, such as reading source files and writing test fixtures, that are entirely consistent with its purpose as a development-time linting tool. No network activity or exfiltration patterns were detected.
Audit Metadata