setup-agentic-repository
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements an automated discovery phase using subagents to inspect local project configuration files (such as package.json, pyproject.toml, and .git/config) and commit history. This data is used solely to customize the generated documentation to the project's specific language, frameworks, and conventions.
- [SAFE]: File creation is handled by a local shell script (scripts/scaffold.sh) that copies static templates. The script includes input validation to prevent directory traversal and performs no network activities.
- [SAFE]: The process follows a 'confirm-before-write' pattern, presenting discovered project details to the user for validation before proceeding with file generation.
- [SAFE]: No obfuscation, prompt injection, or suspicious network operations were detected. All external references point to the author's official project repositories.
Audit Metadata