code-format

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOWCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION] (LOW): The skill executes dotnet format, npx prettier, and a local shell script (format-all.sh) to perform formatting tasks. This is standard behavior for a code formatting tool.
  • [EXTERNAL_DOWNLOADS] (LOW): The use of npx targets the public npm registry to fetch the prettier package. Per [TRUST-SCOPE-RULE], downloads from well-known registries like npmjs.org for standard tools are considered LOW risk.
  • [REMOTE_CODE_EXECUTION] (LOW): npx downloads and executes a remote package at runtime. While 'prettier' is a standard and trusted tool, the execution mechanism itself is a remote code execution pattern.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 04:41 AM