saas-scaffolder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill documentation and provided scripts act as a template generator for web development. The references provide architectural guidance and security best practices for implementing authentication and billing.
- [DYNAMIC_EXECUTION]: The
project_bootstrapper.pyscript generates executable application code and infrastructure configurations (Dockerfile, docker-compose.yml) from predefined internal templates. - [INDIRECT_PROMPT_INJECTION]: The
project_bootstrapper.pyscript accepts user-defined metadata to populate generated files. - Ingestion points: The
config.jsoninput toproject_bootstrapper.pyinscripts/project_bootstrapper.py. - Boundary markers: Absent; user-provided text is directly interpolated into README and package configuration templates.
- Capability inventory: File system write operations for scaffolding project directories.
- Sanitization: Absent; the script writes input strings directly to output files.
Audit Metadata