NYC

web-frameworks

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious patterns, prompt injections, or obfuscation detected. The skill's instructions align with its stated purpose of assisting in web development.- [EXTERNAL_DOWNLOADS] (SAFE): Uses npx create-next-app and npx create-turbo, which are official tools from Vercel (a trusted organization). Integration with remixicon via npm is standard practice for this domain.- [COMMAND_EXECUTION] (SAFE): Shell commands are restricted to project setup and management. The referenced Python utility scripts are for local project initialization and migration.- [CREDENTIALS_UNSAFE] (SAFE): The CI/CD example correctly utilizes GitHub Actions secret syntax (${{ secrets.TURBO_TOKEN }}) rather than hardcoding sensitive credentials.- [DATA_EXPOSURE & EXFILTRATION] (SAFE): No unauthorized file system access or network exfiltration patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:24 PM