template
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads project templates from the vendor's repository on GitHub (
even-realities/evenhub-templates) using thedegittool. It also references official vendor packages from the NPM registry, including@evenrealities/pretextand@evenrealities/evenhub-cli.- [COMMAND_EXECUTION]: Shell commands are executed via theBashtool to initialize projects, install dependencies usingnpm install, and provide project management instructions using the vendor's CLI.- [PROMPT_INJECTION]: The skill processes user-supplied$ARGUMENTSto determine template selection and project naming. It implements a normalization and sanitization process that strips non-alphanumeric characters (except hyphens) from project names and uses fuzzy matching against a predefined list of template names to prevent injection via malformed arguments.
Audit Metadata