fe-init
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs various file system operations and system checks through shell commands.
- Evidence: Script executes
rm -rf,cd, andmkdircommands to manage temporary directories and project files inweb/README.md. - Evidence: Execution of local helper scripts
scripts/detect-pkg-manager.shandscripts/check-gitignore.shto determine environment capabilities. - [REMOTE_CODE_EXECUTION]: The skill downloads and executes scaffolding and configuration tools using package managers.
- Evidence: Execution of
@doremijs/fe-confvia${PKG_MANAGER}x(equivalent to npx) to apply configuration sets inweb/README.md. - Evidence: Use of
pnpm create viteto generate the initial project structure from the official Vite template. - [EXTERNAL_DOWNLOADS]: The skill installs numerous third-party libraries and development tools from the npm registry.
- Evidence: Installation of application dependencies such as
react-router,zustand,ahooks, andantdinweb/README.md. - Evidence: Addition of development-only packages like
unocss,vite-plugin-pages, and@types/file-saverto the project configuration.
Audit Metadata