create-site
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Project Initialization and Command Execution]: The skill utilizes the
Bashtool to automate essential development tasks, including runningnpm installfor dependency management,git initfor version control, andnpm run devto launch a local preview server. These operations are restricted to the project's local directory and are standard for software scaffolding tools. - [Integration with Well-Known Services]: To provide a production-quality experience, the skill uses
WebSearchto find relevant imagery and incorporates direct URLs from Unsplash (images.unsplash.com). This allows the agent to populate the site with high-quality visual content without requiring the user to provide their own assets initially. - [Automated Site Verification]: The skill includes a local validation script (
scripts/validate-site.js) that checks for the presence of required configuration files and ensures no template placeholders remain unreplaced. Additionally, it uses Playwright to navigate the locally running site, allowing the agent to verify that the generated pages load correctly and follow the user's design preferences. - [User-Directed Customization]: The implementation phase involves modifying source code files to apply chosen themes, typography (sourced from Google Fonts), and layout structures. This dynamic generation is guided by user input and pre-defined design references, ensuring the final output aligns with the user's creative vision.
Audit Metadata