frontend-architecture
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute shell commands for project initialization (e.g., 'pnpm create') and package management (e.g., 'pnpm add'). These commands are scoped to the local project directory and are essential for the skill's stated purpose of scaffolding projects.
- [EXTERNAL_DOWNLOADS]: The skill fetches project templates and library dependencies from the public NPM registry. These sources are well-known and trusted within the software development community.
- [REMOTE_CODE_EXECUTION]: The skill utilizes 'pnpm dlx' and 'pnpm exec' to run initialization scripts for tools like shadcn/ui and Playwright. While this involves executing code fetched at runtime, the sources are official and reputable, following standard developer workflows.
Audit Metadata