algorand-project-setup
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
algokitCLI for standard development tasks such as project initialization (algokit init), building (algokit project run build), and testing. These are standard operations within the Algorand development ecosystem. - [EXTERNAL_DOWNLOADS]: Project templates and code examples are retrieved from official Algorand Foundation repositories (e.g.,
github.com/algorandfoundation/puya-ts). These sources are well-known and trusted for the intended developer workflow. - [CREDENTIALS_UNSAFE]: The skill provides instructions for managing deployment mnemonics using
.envfiles. This is a standard and recommended practice for managing secrets in local development environments and does not involve hardcoding credentials. - [PROMPT_INJECTION]: While the skill retrieves external code from GitHub, the instructions prioritize official and vetted repositories, effectively managing the risk associated with untrusted data ingestion.
Audit Metadata