project-folder-structure

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is project organization and maintainability auditing. It defines clear decision rules that prioritize framework constraints and project-native conventions.
  • [SAFE]: The bundled script scripts/structure-snapshot.mjs is designed for passive reconnaissance of folder structures. It explicitly avoids reading file contents to maintain privacy.
  • [SAFE]: The script contains a robust blacklist of sensitive file names and directories (e.g., .env, .secrets, credentials, .git) to prevent accidental exposure of credentials or private metadata during structural scans.
  • [SAFE]: The instructions mandate 'Approval Gates,' requiring the agent to ask for user permission before making changes that affect public APIs, deployment configurations, secrets, or large data sets.
  • [SAFE]: The skill recommends using .env files for secret management, which is a standard security best practice.
  • [SAFE]: No external downloads, remote code execution patterns, or data exfiltration vectors were detected. All analysis and script execution are performed locally on the user's project.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 11:48 AM
Security Audit — agent-trust-hub — project-folder-structure