arch-unplugin
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill references several third-party packages and tools such as @antfu/ni, tsdown, and bumpp. It also suggests using npx degit to download the unplugin-starter template. While these are widely used in the developer community, the sources are not within the explicitly defined trusted organization list.
- [COMMAND_EXECUTION] (INFO): Documentation includes standard shell commands for development workflows, including package installation (nci), building (nr build), and testing (nr test). These are appropriate for the skill's stated purpose.
Audit Metadata