init-project-orchestration
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script located at
scripts/project-orchestration.pyusing theuvtool. This script is responsible for rendering neutral orchestration sources into client-specific adapters and performing consistency checks within the project directory. - [EXTERNAL_DOWNLOADS]: The orchestration script declares a dependency on the
pyyamlpackage in its PEP 723 metadata. When executed viauv, this package is downloaded from the official and well-known Python Package Index (PyPI). - [SAFE]: The skill implements several security best practices within its bundled script, including path validation to ensure generated files do not escape the project root, a check to prevent overwriting non-generated files, and a blacklist to prevent sensitive system or client-specific paths from being included in the generated instructions.
Audit Metadata