mao
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The project setup instructions in
references/setting-up.mdutilize reusable GitHub Actions workflows fromsxzz/workflows. This source is not on the explicit trusted organization list.\n- [COMMAND_EXECUTION] (SAFE): The skill recommends standard tools likepnpm,ni, andeslintfor project maintenance. These commands are typical for the described use case.\n- [NO_CODE] (SAFE): No malicious scripts or executables are bundled directly with the skill. The provided code snippets are templates for project configuration.\n- [DYNAMIC_EXECUTION] (LOW): Thealias.tsscript described inreferences/monorepo.mddynamically reads and updates thetsconfig.alias.jsonfile. This is a standard local tooling pattern with low risk.
Audit Metadata