algorand-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves project templates and source code examples from the
algorandfoundationorganization on GitHub. This functionality is central to project initialization and providing developer reference materials.\n- [COMMAND_EXECUTION]: The skill provides instructions for executing various shell commands via thealgokitCLI, including project initialization, building contracts, running tests, and managing local networks.\n- [DYNAMIC_EXECUTION]: The skill facilitates the compilation of smart contracts and the execution of test suites which involves running generated code and test scripts within the project workspace.\n- [INDIRECT_PROMPT_INJECTION]: The skill fetches external content from GitHub to provide code examples, creating a surface for potential injection.\n - Ingestion points: GitHub repository files fetched using
github_get_file_contents(e.g., inSKILL.mdandreferences/github-search-tools.md).\n - Boundary markers: The skill instructs the agent to focus on official
algorandfoundationrepositories.\n - Capability inventory: File system writes, command execution via
algokit, and network access for deployment.\n - Sanitization: Relies on the use of official repositories for source material.
Audit Metadata