cw-setup-project

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled Python script create_project.py to automate the setup of the writing directory. This is the primary function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied file paths to determine where to create the project home.
  • Ingestion points: The agent takes a directory path or folder name provided by the user.
  • Boundary markers: The instructions in SKILL.md specify wrapping the user-supplied path in double quotes when executing the command.
  • Capability inventory: The script create_project.py has the ability to create directories (mkdir) and copy files (shutil.copy2) from a local template folder to the target path.
  • Sanitization: The Python script uses the argparse library to handle command-line arguments and pathlib for safe path resolution and expansion.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 06:43 PM
Security Audit — agent-trust-hub — cw-setup-project