gpc-multi-app

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill follows best practices for CLI tool integration and provides safe, well-documented examples for multi-app management.
  • [COMMAND_EXECUTION]: The scripts/detect_gpc.mjs file uses execSync to run local GPC commands (e.g., gpc --version, gpc auth status) to verify the environment. These commands are hardcoded, do not process untrusted input, and are necessary for the skill's detection logic.
  • [EXTERNAL_DOWNLOADS]: The documentation and detection script reference @gpc-cli/cli, which may be downloaded via npx from the official npm registry. This is the expected and standard method for using the tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 01:58 PM