nuxt-core

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The script fetches official Nuxt modules and development tools from the npm registry using standard package managers (npm, npx).\n- [COMMAND_EXECUTION] (SAFE): Shell commands are used appropriately to bootstrap the project directory structure and configuration files. All operations are local and consistent with the project's purpose.\n- [CREDENTIALS_UNSAFE] (SAFE): The project configuration refers to secrets (like API_SECRET) through environment variables and placeholders. The script explicitly adds potential secret-bearing files like .dev.vars and .env to the .gitignore file, following security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:55 PM