project-scaffolding
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains production-ready project templates and scaffolding scripts for the Grey Haven stack. All shell scripts (
.shfiles) perform standard directory creation and file generation usingmkdirandcatredirection. No evidence of obfuscation, privilege escalation, or unauthorized data access was found. - [EXTERNAL_DOWNLOADS]: The skill references documentation and official websites for trusted technologies such as Cloudflare Workers, TanStack, FastAPI, and Drizzle ORM. It suggests installing dependencies via standard package managers (NPM, PyPI, uv) from official registries, which is expected behavior for a project scaffolding tool.
- [INDIRECT_PROMPT_INJECTION]: The templates in the
templates/directory ingest user-provided project names through command-line arguments. While these names are interpolated into configuration files usingsed, the attack surface is limited to local file corruption or script failure if malicious characters are used, posing no significant threat to the agent or system environment.
Audit Metadata