watt
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute various system and application commands, including Node.js version checks, framework detection, build processes, and the
wattpmCLI for managing running applications. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
wattpmCLI and official@platformaticstackables from npm. It also includes instructions for downloading and installing official CLI tools from well-known services such as Fly.io, Railway, and Vercel. - [REMOTE_CODE_EXECUTION]: The
wattpm resolvecommand is used to clone and configure external applications from Git repositories defined in the project's orchestration configuration. This is a core functional requirement for the multi-service architecture supported by Platformatic Watt. - [COMMAND_EXECUTION]: The utility
wattpm patch-configis used to apply configuration changes by executing JavaScript logic defined in local patch files. - [DATA_EXFILTRATION]: The skill provides detailed patterns for setting up observability, which involves sending application logs, metrics, and traces to external monitoring endpoints (e.g., OTLP, Datadog, Jaeger). This is standard functionality for application monitoring.
Audit Metadata