skills/doremijs/skills/fe-init/Gen Agent Trust Hub

fe-init

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs various file system operations and system checks through shell commands.
  • Evidence: Script executes rm -rf, cd, and mkdir commands to manage temporary directories and project files in web/README.md.
  • Evidence: Execution of local helper scripts scripts/detect-pkg-manager.sh and scripts/check-gitignore.sh to determine environment capabilities.
  • [REMOTE_CODE_EXECUTION]: The skill downloads and executes scaffolding and configuration tools using package managers.
  • Evidence: Execution of @doremijs/fe-conf via ${PKG_MANAGER}x (equivalent to npx) to apply configuration sets in web/README.md.
  • Evidence: Use of pnpm create vite to generate the initial project structure from the official Vite template.
  • [EXTERNAL_DOWNLOADS]: The skill installs numerous third-party libraries and development tools from the npm registry.
  • Evidence: Installation of application dependencies such as react-router, zustand, ahooks, and antd in web/README.md.
  • Evidence: Addition of development-only packages like unocss, vite-plugin-pages, and @types/file-saver to the project configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 09:58 AM