scaffold-project

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The devcontainer Dockerfile is configured to fetch the pnpm installation script from its official, well-known domain at get.pnpm.io.
  • [COMMAND_EXECUTION]: The skill performs a git init command within the user-specified target directory to initialize a new repository once the scaffolding process is finished.
  • [REMOTE_CODE_EXECUTION]: The devcontainer configuration includes a script that downloads and executes the pnpm installer from a well-known service provider, which is standard for initializing Node.js development environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 08:13 PM