init-textbook
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes benign local commands such as
git config,git remote, andbasenameto infer project metadata like the author name and repository name. These are standard operations for a development-oriented scaffolding tool. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install standard, well-known software packages (
mkdocs,mkdocs-material) from official registries to build the project. It does not perform any automated or hidden downloads itself. - [EXTERNAL_DOWNLOADS]: The templates reference external URLs for Creative Commons licenses and the author's own documentation. These are used appropriately for licensing and schema definitions.
- [PROMPT_INJECTION]: The instructions include a confirmation step where resolved values are displayed to the user before any files are written, providing a manual check against unexpected behavior during text substitution.
Audit Metadata