init-project-orchestration

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled Python script located at scripts/project-orchestration.py using the uv tool. This script is responsible for rendering neutral orchestration sources into client-specific adapters and performing consistency checks within the project directory.
  • [EXTERNAL_DOWNLOADS]: The orchestration script declares a dependency on the pyyaml package in its PEP 723 metadata. When executed via uv, this package is downloaded from the official and well-known Python Package Index (PyPI).
  • [SAFE]: The skill implements several security best practices within its bundled script, including path validation to ensure generated files do not escape the project root, a check to prevent overwriting non-generated files, and a blacklist to prevent sensitive system or client-specific paths from being included in the generated instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 11:03 AM
Security Audit — agent-trust-hub — init-project-orchestration