init
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard project initialization tasks such as creating directory structures, copying configuration templates, and initializing a git repository.
- [EXTERNAL_DOWNLOADS]: The skill uses
pnpm installto download standard, well-known development dependencies from the npm registry. It also provides an optional script to clone curated documentation repositories from GitHub for local reference. These sources are reputable and aligned with the skill's purpose. - [COMMAND_EXECUTION]: The skill executes routine commands for environment verification (
pnpm --version,git --version), project setup (git init,pnpm install), and quality assurance checks. All commands are transparently documented in the workflow. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill includes a script to sync local documentation artifacts to the Storybook public directory, which is a core feature for sharing project planning artifacts.
- [PROMPT_INJECTION]: No malicious prompt injection or behavior override patterns were detected in the instructions or templates.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or unsafe handling of secrets were found. The skill follows best practices by instructing users on standard tool configurations.
Audit Metadata