scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes standard utilities such as
mkdir,git mv, andgit committo manage exercise files. It also runspnpm ai-hero-cli internal lintto validate the structure. These tools are project-specific or standard development utilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied plans (ingestion point: exercise plan; capabilities:
mkdir, file write; boundary markers: none; sanitization: none) to generate directory names and content. While this creates a surface for data-driven actions, the operations are restricted to the local workspace and validated by the linter, matching the primary purpose of the skill.
Audit Metadata