nuxt-init

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs a variety of development tools and libraries from the NPM registry.
  • Evidence: The bun add -d command in SKILL.md lists multiple packages including eslint, prettier, and terraform-scaffold.
  • [COMMAND_EXECUTION]: The skill automates the project setup by running shell commands to initialize dependencies and environment configurations.
  • Evidence: Workflow steps in SKILL.md include execution of bun install, bun run prepare, and bunx terraform-scaffold init.
  • [REMOTE_CODE_EXECUTION]: The skill executes remote code by downloading and running an external CLI tool via the package runner.
  • Evidence: Usage of bunx terraform-scaffold to initialize infrastructure components, which fetches and runs the tool from the registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 10:52 AM