surf-app
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes standard shell commands for project initialization and development, including
npx,npm,cat, andgrep. These are used appropriately to scaffold the project, install dependencies, and verify local configuration. - [EXTERNAL_DOWNLOADS]: Downloads the
create-surf-appscaffolding tool and associated SDK packages (@surf-ai/sdk,@surf-ai/theme) from the npm registry. These resources belong to the official vendor and are required for the skill's primary function. - [REMOTE_CODE_EXECUTION]: Uses
npx create-surf-app .to execute a remote scaffolding script. This is a standard and expected practice for modern web development frameworks and tools provided by a vendor.
Audit Metadata