create-webroles

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • Internal Script Execution: The skill utilizes local Node.js scripts for critical tasks, such as generating unique identifiers (generate-uuid.js) and validating the final output (validate-webroles.js). These scripts are part of the skill's internal package, ensuring that execution is controlled and restricted to known, vendor-provided logic.
  • Structured File Operations: The skill performs file system tasks like creating directories and writing YAML configuration files within the project's .powerpages-site folder. These actions are transparently tracked via task management tools and are confined to the relevant project structure.
  • Automated Validation Hooks: A Stop hook is implemented to run a validation script after the skill finishes. This script verifies that all created roles have valid UUID formats and necessary metadata, reducing the risk of malformed configurations or logic errors.
  • User-Centric Decision Points: Critical actions, such as deploying the site or creating new roles, require explicit user confirmation via the AskUserQuestion tool, maintaining human-in-the-loop control over the site's configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 08:03 AM