scaffold-exercises

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes standard utilities such as mkdir, git mv, and git commit to manage exercise files. It also runs pnpm ai-hero-cli internal lint to validate the structure. These tools are project-specific or standard development utilities.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied plans (ingestion point: exercise plan; capabilities: mkdir, file write; boundary markers: none; sanitization: none) to generate directory names and content. While this creates a surface for data-driven actions, the operations are restricted to the local workspace and validated by the linter, matching the primary purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:13 AM