yy-create-template-project
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by defining explicit "Security Boundaries" that prevent the copying of sensitive data like secrets, tokens, and private configurations.
- [COMMAND_EXECUTION]: The skill includes functionality to execute validation commands within the generated template project (Step 8). This capability is appropriately restricted, requiring explicit user authorization before execution.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external project files provided by the user (Step 2), which is an inherent attack surface for indirect prompt injection. The risk is mitigated by detailed procedural steps (Steps 3, 5, and 8) that focus on sanitizing the content, replacing business logic with neutral examples, and verifying the absence of malicious or sensitive data.
Audit Metadata