scaffold-project
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The devcontainer Dockerfile is configured to fetch the
pnpminstallation script from its official, well-known domain atget.pnpm.io. - [COMMAND_EXECUTION]: The skill performs a
git initcommand within the user-specified target directory to initialize a new repository once the scaffolding process is finished. - [REMOTE_CODE_EXECUTION]: The devcontainer configuration includes a script that downloads and executes the
pnpminstaller from a well-known service provider, which is standard for initializing Node.js development environments.
Audit Metadata