readme-wizard
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses local scripts (
scripts/scan_project.sh) to query repository structures and extract fields like project name, description, active license, and package managers. - [EXTERNAL_DOWNLOADS]: The
scan_project.shscript invokescurlto pull repository information directly from the GitHub API (https://api.github.com/repos/) and dynamically checks the repository homepage URL if present to extract public community channels. This uses the well-known/official GitHub service domain neutrally. - [SAFE]: The badge structures and templates point to well-known infrastructure endpoints like
shields.io,contrib.rocks, andstar-history.com, aligning entirely with the stated purpose of producing polished repository assets.
Audit Metadata