init-textbook

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes benign local commands such as git config, git remote, and basename to infer project metadata like the author name and repository name. These are standard operations for a development-oriented scaffolding tool.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install standard, well-known software packages (mkdocs, mkdocs-material) from official registries to build the project. It does not perform any automated or hidden downloads itself.
  • [EXTERNAL_DOWNLOADS]: The templates reference external URLs for Creative Commons licenses and the author's own documentation. These are used appropriately for licensing and schema definitions.
  • [PROMPT_INJECTION]: The instructions include a confirmation step where resolved values are displayed to the user before any files are written, providing a manual check against unexpected behavior during text substitution.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 09:00 PM