create-site

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Project Initialization and Command Execution]: The skill utilizes the Bash tool to automate essential development tasks, including running npm install for dependency management, git init for version control, and npm run dev to launch a local preview server. These operations are restricted to the project's local directory and are standard for software scaffolding tools.
  • [Integration with Well-Known Services]: To provide a production-quality experience, the skill uses WebSearch to find relevant imagery and incorporates direct URLs from Unsplash (images.unsplash.com). This allows the agent to populate the site with high-quality visual content without requiring the user to provide their own assets initially.
  • [Automated Site Verification]: The skill includes a local validation script (scripts/validate-site.js) that checks for the presence of required configuration files and ensures no template placeholders remain unreplaced. Additionally, it uses Playwright to navigate the locally running site, allowing the agent to verify that the generated pages load correctly and follow the user's design preferences.
  • [User-Directed Customization]: The implementation phase involves modifying source code files to apply chosen themes, typography (sourced from Google Fonts), and layout structures. This dynamic generation is guided by user input and pre-defined design references, ensuring the final output aligns with the user's creative vision.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 06:00 AM