vercel-plugin-eval

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Trusted External Resource]: The skill uses npx to download and run a tool from the official repository of a trusted organization. This is used to initialize the testing environment with the necessary plugin components.
  • [Local Session Management]: The skill utilizes wezterm and standard shell utilities (find, grep, mkdir) to automate the creation of test projects and the launching of terminal sessions. These commands are localized to the user's development directory.
  • [Log Monitoring]: To verify plugin hooks, the skill reads from local debug log files located in the ~/.claude/debug directory. This monitoring is essential for the skill's primary function of providing a coverage report on hook performance.
  • [Dynamic Environment Discovery]: A small Node.js script is executed to identify the system's temporary directory for tracking session claims. This is a standard method for ensuring file operations are directed to the correct environment-specific paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 09:13 PM