tanstack-chat-netlify
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The skill clones a project template from github.com/netlify-templates. As this organization is not in the trusted sources list, the code content is not verified.
- REMOTE_CODE_EXECUTION (LOW): The skill executes
npm installon the cloned repository, which could potentially trigger malicious lifecycle scripts (preinstall/postinstall) if the external repository content were untrustworthy. - COMMAND_EXECUTION (LOW): The skill runs shell commands including
git clone,npm install, andnetlify deploy. While these are standard for the primary purpose, they involve running unverified external logic from an untrusted org.
Audit Metadata