setup-cgi-core
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the cgi-core library from the official NPM registry to enable CGI support in a Node.js environment.
- [COMMAND_EXECUTION]: The skill configures the execution of local scripts via the CGI protocol. To mitigate risks, the documentation explicitly instructs the user to constrain script execution to a specific directory and avoid dynamic user-controlled paths.
- [SAFE]: The skill incorporates defensive configuration guidance, including warnings about header spoofing when using trustProxy and the implementation of request timeouts and buffer limits for payload safety.
Audit Metadata