handler-scaffold-gen
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run developer commands such as 'clef', 'npx tsx', and 'npx vitest'. These are used for code generation and running conformance tests as part of the intended developer workflow.
- [EXTERNAL_DOWNLOADS]: The skill instructions include the use of 'npx', which may fetch the 'tsx' and 'vitest' packages from the official npm registry. These are well-known development utilities and do not pose a security risk in this context.
Audit Metadata