recipe-front-adjust Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill depends on several other skills (external-resource-context, documentation-criteria, frontend-ai-guide, typescript-rules, implementation-approach, test-implement, subagents-orchestration-guide, llm-friendly-context) that are not included in the submitted directory. This is acceptable if they exist in the broader workflow, but the skill should clearly state that these are required dependencies.
• The skill uses subagents and tools like Bash, Edit/Write, and MCPs, but does not explicitly restrict or sandbox these operations. However, the explicit user instruction requirement and guided executor pattern mitigate risk.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.