zo-space
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical manual for developing on the zo.space environment, utilizing standard web frameworks like React and Hono. It contains no executable malicious code or deceptive instructions.
- [SAFE]: While the skill describes capabilities such as file system access and shell command execution (via Bun.spawn), these are documented as legitimate features of the zo.space runtime for user application development. The provided examples demonstrate safe practices, such as using environment variables for credentials and Zod for input validation.
- [SAFE]: Analysis of the package lists and remote references shows only well-known, reputable libraries and platform-specific APIs (e.g., api.zo.computer). No unauthorized external downloads or suspicious remote code patterns were identified.
- [SAFE]: The skill includes no obfuscation, hardcoded secrets, or attempts at prompt injection. It reinforces security boundaries by noting that users cannot install unauthorized npm packages.
Audit Metadata