superbuild
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (LOW): The
scripts/validate-phase.shscript usesevalto run linters and test suites. While commands are largely hardcoded based on the project stack,evalis a dynamic execution primitive. - [EXTERNAL_DOWNLOADS] (LOW): JS/TS validation uses
npx, which may download and execute remote packages from the npm registry if not present locally.
Audit Metadata