surface-component-scaffold-gen

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation and validation sections include bash commands for component scaffolding and testing. Specifically, it uses clef scaffold component, npx tsx for CLI execution, and npx vitest for running test suites.
  • [EXTERNAL_DOWNLOADS]: The use of npx indicates that the skill may fetch Node.js packages such as tsx and vitest from the official npm registry if they are not already present in the local environment.
  • [SAFE]: The skill exhibits no signs of prompt injection, data exfiltration, or obfuscation. It focuses on generating static boilerplate files based on user-provided arguments, following established patterns for developer-oriented scaffolding tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 12:27 PM