repository-foundation-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions focus on repository structure and tool recommendations for different project stages (L1 to L3). It incorporates industry best practices, such as utilizing
.gitignorefor sensitive data management and implementing security scanners (CodeQL, Semgrep, Gitleaks) for production-ready projects. - [COMMAND_EXECUTION]: While the skill mentions various shell commands for dependency management and cleanup (e.g.,
pnpm install,docker system prune), it explicitly instructs the agent to obtain user confirmation before executing potentially resource-intensive or impactful commands, following the 'Low-End Machine Rule'. - [EXTERNAL_DOWNLOADS]: The skill references a comprehensive suite of well-known and widely adopted development tools, including Biome, Vitest, and SWC. These references are appropriate for the skill's stated purpose of repository scaffolding and do not involve suspicious or unverified sources.
Audit Metadata