help-me-get-started
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing various development tools from reputable external sources.
- References include official installation scripts for Claude Code (claude.ai), the uv package manager (astral.sh), and Homebrew (brew.sh).
- Tool binaries are fetched from official CDN or GitHub release pages for established tools like Tabular Editor and Microsoft Azure CLI.
- [COMMAND_EXECUTION]: The bundled script
show_explainer.pyexecutes system browser commands to display learning content. - It uses standard utilities such as
open(macOS),xdg-open(Linux), oros.startfile(Windows). - The script implements safe subprocess handling by passing arguments as a list rather than a shell string, which prevents command injection risks.
- [INDIRECT_PROMPT_INJECTION]: The skill heavily uses interactive prompts to understand user goals and licensing levels.
- This ingestion of user-provided data is used exclusively to tailor the educational content and tool recommendations.
- No high-risk capabilities are exposed to this untrusted input that could be leveraged for malicious purposes within the scope of this onboarding guide.
Audit Metadata