test-mlua-lsp
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill invokes npx to fetch the @choigawoon/mlua-lsp package from the official NPM registry. This is a standard method for utilizing CLI tools and the package is provided by the skill's author.\n- [COMMAND_EXECUTION]: The Node.js scripts in the scripts/ directory use child_process.spawn to execute the npx command. This approach passes arguments as a list, which is a secure practice that avoids shell command injection vulnerabilities.\n- [DATA_EXPOSURE]: The skill accesses files within the designated project root to perform code analysis. This access is restricted to the workspace provided by the user and is necessary for the skill's primary function of code diagnostics and navigation.
Audit Metadata