uniappx-project-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (SAFE): The skill utilizes
npx degitto download project templates from the officialdcloudio/uni-preset-vue-xGitHub repository. This is a standard practice for project scaffolding and is considered safe given the trusted source (DCloud). - COMMAND_EXECUTION (SAFE): The skill documentation and templates provide standard CLI commands (
npm install,npm run dev,npm create) and a helper shell script for project initialization. These commands are typical for Node.js development workflows and do not exhibit malicious behavior. - DATA_EXPOSURE (SAFE): No hardcoded credentials, sensitive file path access, or unauthorized network operations were found in the analyzed files.
- PROMPT_INJECTION (SAFE): No prompt injection or behavior override patterns were detected in the instructions.
Audit Metadata