project-tooling
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands and scripts for managing project infrastructure, repository setup, and deployments. These commands use standard, legitimate flags for tools like
gh,vercel, andsupabase. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing required CLI tools using official package managers like Homebrew and NPM. It also references official GitHub Actions from trusted organizations such as Supabase and well-known deployment actions for Vercel.
- [CREDENTIALS_UNSAFE]: While the skill manages sensitive data such as API keys and environment variables, it explicitly follows best practices by instructing the user to use GitHub Secrets, environment variables, and local
.envfiles, while warning against hardcoding secrets.
Audit Metadata