skills/lfortin/skills/setup-cgi-core/Gen Agent Trust Hub

setup-cgi-core

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the cgi-core library from the official NPM registry to enable CGI support in a Node.js environment.
  • [COMMAND_EXECUTION]: The skill configures the execution of local scripts via the CGI protocol. To mitigate risks, the documentation explicitly instructs the user to constrain script execution to a specific directory and avoid dynamic user-controlled paths.
  • [SAFE]: The skill incorporates defensive configuration guidance, including warnings about header spoofing when using trustProxy and the implementation of request timeouts and buffer limits for payload safety.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 01:39 PM