cli-framework-cli-commander
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively utilizes well-known, industry-standard Node.js libraries such as
commander,@clack/prompts,picocolors, andyamlfor CLI development and configuration parsing. - [SAFE]: Configuration resolution follows a secure and transparent precedence hierarchy (CLI flags > environment variables > project config > global config), with global settings stored in the standard user home directory (
~/.myapp/config.yaml). - [SAFE]: External references, specifically the metadata schema URL, point to the vendor's (
agents-inc) official GitHub organization, representing a legitimate and expected use of vendor resources. - [SAFE]: The instructions mandate critical safety practices, including handling process signals (SIGINT) to prevent orphaned processes and checking for cancellation tokens (
p.isCancel()) in all interactive prompts. - [SAFE]: The provided code patterns demonstrate the use of input validation for interactive text prompts to ensure that user-provided data meets specific criteria before processing.
Audit Metadata