cmd-setup-phoenix-duskmoon

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill adds several dependencies from the @duskmoon-dev namespace (NPM) and the phoenix_duskmoon package (Hex). These are vendor-provided resources from the skill's author and are necessary for the UI framework to function.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard build tool commands, specifically mix deps.get and bun install, to finalize the environment setup. These commands are run locally to install the configured dependencies.
  • [COMMAND_EXECUTION]: The skill processes existing project files like mix.exs and config/config.exs to apply necessary modifications. While this represents a surface for indirect instructions from project code to influence the agent, the behavior is constrained to infrastructure migration and setup within the project context.
  • Ingestion points: mix.exs, config/config.exs, config/dev.exs, assets/package.json (all in SKILL.md tasks)
  • Boundary markers: Absent
  • Capability inventory: File system writes, execution of mix and bun commands
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 07:41 AM