landing-site
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The instructions involve running
npx vigiles auditfor project auditing,git clonefor retrieving repositories, andnode dist/cli.jsfor local maintenance tasks. These are standard operations for the tool's documented development workflow. - [REMOTE_CODE_EXECUTION]: The skill references the use of
npxto execute thevigilesaudit tool, which involves fetching and running code from a package registry. This is a standard and expected mechanism for using modern developer CLI tools. - [EXTERNAL_DOWNLOADS]: The skill describes an architecture that utilizes the GitHub API (
api.github.com) to fetch repository data for client-side auditing and recommends the integration of privacy-friendly analytics providers like Plausible, Fathom, or GoatCounter via script tags.
Audit Metadata