template

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads project templates from the vendor's repository on GitHub (even-realities/evenhub-templates) using the degit tool. It also references official vendor packages from the NPM registry, including @evenrealities/pretext and @evenrealities/evenhub-cli.- [COMMAND_EXECUTION]: Shell commands are executed via the Bash tool to initialize projects, install dependencies using npm install, and provide project management instructions using the vendor's CLI.- [PROMPT_INJECTION]: The skill processes user-supplied $ARGUMENTS to determine template selection and project naming. It implements a normalization and sanitization process that strips non-alphanumeric characters (except hyphens) from project names and uses fuzzy matching against a predefined list of template names to prevent injection via malformed arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:57 PM
Security Audit — agent-trust-hub — template