barba-js
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/project_setup.pyutility uses the Pythonsubprocessmodule to run thenpm installcommand. This is used to automatically install the development environment for a new project created by the script. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external Node.js packages including
@barba/core,gsap, andvite. These are standard, industry-recognized libraries for web animation and project bundling, and they are downloaded from the official npm registry.
Audit Metadata