tapforce-sveltekit
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- COMMAND_EXECUTION (SAFE): Environment check scripts verify local tool versions.\n
- Evidence:
execSync('node --version')inreferences/environment-check.js.\n - Evidence:
node --versioninreferences/environment-check.sh.\n - Risk Assessment: These are hardcoded commands with no user-controlled input, used solely for version validation.\n- EXTERNAL_DOWNLOADS (SAFE): Documentation recommends standard project initialization tools.\n
- Evidence:
pnpm dlx sv create .inrules/package-management.md.\n - Evidence:
pnpm dlx shadcn-svelte@latest initinrules/package-management.md.\n - Risk Assessment: These commands fetch and execute bootstrapping tools from the official npm registry, which is the standard, expected behavior for the Svelte ecosystem.
Audit Metadata