project-scaffolding

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains production-ready project templates and scaffolding scripts for the Grey Haven stack. All shell scripts (.sh files) perform standard directory creation and file generation using mkdir and cat redirection. No evidence of obfuscation, privilege escalation, or unauthorized data access was found.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and official websites for trusted technologies such as Cloudflare Workers, TanStack, FastAPI, and Drizzle ORM. It suggests installing dependencies via standard package managers (NPM, PyPI, uv) from official registries, which is expected behavior for a project scaffolding tool.
  • [INDIRECT_PROMPT_INJECTION]: The templates in the templates/ directory ingest user-provided project names through command-line arguments. While these names are interpolated into configuration files using sed, the attack surface is limited to local file corruption or script failure if malicious characters are used, posing no significant threat to the agent or system environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:31 AM