scaffold-catalog

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs supplementary capabilities from the author's official catalog-skills repository using the npx skills add command. This is used to integrate the newly created catalog into the project's specialized agent workflow.
  • [COMMAND_EXECUTION]: Utilizes Bash commands to perform standard project initialization tasks, such as creating directory structures (mkdir), initializing a git repository (git init), and executing a validation script (validate-notebook.sh) to ensure the generated files are correct.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 01:16 PM
Security Audit — agent-trust-hub — scaffold-catalog