tapforce-sveltekit

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • COMMAND_EXECUTION (SAFE): Environment check scripts verify local tool versions.\n
  • Evidence: execSync('node --version') in references/environment-check.js.\n
  • Evidence: node --version in references/environment-check.sh.\n
  • Risk Assessment: These are hardcoded commands with no user-controlled input, used solely for version validation.\n- EXTERNAL_DOWNLOADS (SAFE): Documentation recommends standard project initialization tools.\n
  • Evidence: pnpm dlx sv create . in rules/package-management.md.\n
  • Evidence: pnpm dlx shadcn-svelte@latest init in rules/package-management.md.\n
  • Risk Assessment: These commands fetch and execute bootstrapping tools from the official npm registry, which is the standard, expected behavior for the Svelte ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:03 PM