sdk-install
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to install SDK dependencies and verify project builds. These operations are restricted to the project lifecycle and are performed only after stack detection and user confirmation.
- [CREDENTIALS_UNSAFE]: While the skill manages sensitive API keys and client IDs, it mandates robust safety protocols. It strictly prohibits hardcoding, requires explicit user consent via blocking question tools before fetching or writing secrets, and ensures .env files are added to .gitignore.
- [EXTERNAL_DOWNLOADS]: The skill installs LaunchDarkly SDK packages from official registries (e.g., NPM, PyPI). All package names and documentation URLs are consistent with the official infrastructure of the author (launchdarkly).
- [SAFE]: No patterns of obfuscation, prompt injection, or unauthorized persistence were detected. The skill's behavior is transparent and confined to its documented purpose of SDK onboarding.
Audit Metadata