NYC

fullstack-debugger

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The scripts use standard diagnostic tools like curl, npm, npx, and git to verify the state of a local development environment and remote endpoints. These operations are transparent and consistent with the skill's stated purpose.
  • [DATA_EXPOSURE] (SAFE): scripts/diagnose.sh checks for the presence of environment variables but masks their values when printing. scripts/check-rls.js requires standard Supabase credentials (URL and Anon Key) which are handled via environment variables or command-line arguments.
  • [REMOTE_CODE_EXECUTION] (SAFE): While the scripts run build commands and package managers (npm run build, npm install), these are standard practices in a JavaScript development workflow and do not involve downloading or executing code from untrusted external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:40 PM