freshworks-app-dev-skill
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads development resources, including the Freshworks Developer Kit (FDK) and the Crayons UI component library, from official Freshworks domains (freshdev.io) and well-known public CDNs (jsdelivr.net, unpkg.com, googleapis.com). These downloads are necessary for the primary purpose of building and rendering Freshworks applications.
- [COMMAND_EXECUTION]: The skill automates the execution of the
fdk validatecommand, which is the standard tool provided by Freshworks for verifying application code quality and platform compliance. It also includes a shell script (cleanup_old_rules.sh) used to manage configuration files within the developer's local project workspace. - [SAFE]: Analysis of the 102 files, including templates and documentation, confirms that all behaviors are consistent with its stated purpose as a developer tool. No instances of obfuscation, persistence, data exfiltration, or credential harvesting were detected. The skill actively enforces security best practices, such as discouraging the use of
eval()and requiring tokens to be handled server-side.
Audit Metadata