vscode-project-init
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the official 'yo' and 'generator-code' packages from the npm registry to scaffold the project. These are well-known development tools maintained by the Yeoman and VS Code teams.\n- [COMMAND_EXECUTION]: Executes shell commands to initialize the project and install dependencies. The scaffolding command uses the '--' delimiter to separate npx arguments from package arguments, which is a security best practice.\n- [PROMPT_INJECTION]: Indirect Prompt Injection: The skill interpolates user-supplied project names into a shell command, creating a potential surface for command injection if the input is not sanitized by the agent before execution.\n
- Ingestion points: User-provided project name in SKILL.md.\n
- Boundary markers: None used to wrap the project name placeholder in the shell command.\n
- Capability inventory: Shell command execution via npx and npm across the initialization workflow.\n
- Sanitization: No explicit validation or sanitization of the user input is instructed.
Audit Metadata