interf-draft

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx interf validate which downloads the interf package from the official npm registry. This package is provided by the vendor (interf-labs) to facilitate schema validation.
  • [COMMAND_EXECUTION]: Executes the shell command npx interf validate. This command is used locally to check the correctness of the generated interf.yaml file against a defined schema.
  • [SAFE]: The skill's analysis of configuration files and environment variables is limited to identifying project dependencies for the purpose of drafting a contract. There are no instructions or mechanisms identified that would exfiltrate sensitive data or execute untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 05:17 AM