schema0-dev
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the Bun runtime installation script from
https://bun.sh/install. Bun is a well-known technology service used for JavaScript development. - [COMMAND_EXECUTION]: Executes various
schema0CLI commands to manage the application lifecycle, includingsetup,init,deploy, andsync. These commands interact with the vendor's platform to manage infrastructure and code. - [DATA_EXFILTRATION]: Provides instructions and sub-skills for managing application secrets using the
schema0 secrets setcommand. This practice follows standard secure secret management by moving sensitive keys into a managed environment rather than hardcoding them in the repository. - [REMOTE_CODE_EXECUTION]: Installs the
@schema0/clipackage globally viabun install -g. This is the official command-line tool required for the skill to operate on the Schema0 platform. - [PROMPT_INJECTION]: The skill defines a highly autonomous persona ('dedicated full-stack engineer') with instructions to make technical decisions without user intervention. While this grants significant agency, it aligns with the skill's primary objective and does not attempt to bypass safety filters or reveal system prompts.
Audit Metadata