brand-init
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled shell script (
scripts/brand.sh) to perform file system operations such as creating directories, generating YAML files, and managing a registry. These operations are local, scoped to the user's project directories, and lack dangerous patterns like network exfiltration or shell injection from untrusted external sources.- [SAFE]: The skill implements protective measures such as refusing to overwrite existing files and usingset -euo pipefailin the shell script to ensure execution stops on errors. The inputs are primarily provided by the user for project organization purposes. No credentials, remote downloads, or obfuscation were detected.
Audit Metadata