surf-app

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard shell commands for project initialization and development, including npx, npm, cat, and grep. These are used appropriately to scaffold the project, install dependencies, and verify local configuration.
  • [EXTERNAL_DOWNLOADS]: Downloads the create-surf-app scaffolding tool and associated SDK packages (@surf-ai/sdk, @surf-ai/theme) from the npm registry. These resources belong to the official vendor and are required for the skill's primary function.
  • [REMOTE_CODE_EXECUTION]: Uses npx create-surf-app . to execute a remote scaffolding script. This is a standard and expected practice for modern web development frameworks and tools provided by a vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 11:57 PM