wds-0-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a template engine and project initializer. It uses standard Markdown placeholders for variable interpolation.
- [EXTERNAL_DOWNLOADS]: The
catalog.template.htmlfile references common and trusted CDNs for styling (Tailwind CSS) and typography (Google Fonts). These references are standard for web-based design documentation and do not pose a security risk. - [COMMAND_EXECUTION]: The workflow involves creating a local folder structure and saving a configuration YAML file (
wds-project-outline.yaml). These operations are explicitly described and necessary for the stated purpose of project setup. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user input to populate project briefs and personas. While this presents an injection surface, the risk is negligible as the output consists of static documentation files without automated execution steps.
Audit Metadata