code-format
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill executes
dotnet format,npx prettier, and a local shell script (format-all.sh) to perform formatting tasks. This is standard behavior for a code formatting tool. - [EXTERNAL_DOWNLOADS] (LOW): The use of
npxtargets the public npm registry to fetch theprettierpackage. Per [TRUST-SCOPE-RULE], downloads from well-known registries like npmjs.org for standard tools are considered LOW risk. - [REMOTE_CODE_EXECUTION] (LOW):
npxdownloads and executes a remote package at runtime. While 'prettier' is a standard and trusted tool, the execution mechanism itself is a remote code execution pattern.
Audit Metadata