skills/alinaqi/maggy/project-tooling/Gen Agent Trust Hub

project-tooling

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell commands and scripts for managing project infrastructure, repository setup, and deployments. These commands use standard, legitimate flags for tools like gh, vercel, and supabase.
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing required CLI tools using official package managers like Homebrew and NPM. It also references official GitHub Actions from trusted organizations such as Supabase and well-known deployment actions for Vercel.
  • [CREDENTIALS_UNSAFE]: While the skill manages sensitive data such as API keys and environment variables, it explicitly follows best practices by instructing the user to use GitHub Secrets, environment variables, and local .env files, while warning against hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 04:17 PM
Security Audit — agent-trust-hub — project-tooling