antfu
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill recommends installing established development dependencies such as
@antfu/eslint-config,tsdown,vitest, andunocss. These are standard packages from a well-known open-source contributor. - [COMMAND_EXECUTION] (SAFE): Includes instructions for the agent to run formatting and installation commands like
pnpm run lint --fixandni. These actions are necessary for the skill's primary purpose of maintaining project standards. - [DYNAMIC_EXECUTION] (SAFE): Provides a utility script (
alias.ts) intended for monorepo maintenance that performs local filesystem operations (reading/writingtsconfig.alias.json). This is a documented, standard automation pattern for the intended use case. - [REMOTE_CODE_EXECUTION] (SAFE): References reusable GitHub Action workflows from
sxzz/workflows. This is a common practice for CI/CD and uses a trusted community source with appropriate permission scopes (e.g.,contents: read).
Audit Metadata