project-starter

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known libraries and frameworks from official registries (NPM and PyPI). These include packages like React, Next.js, FastAPI, and Prisma, which are standard in modern development workflows.
  • [COMMAND_EXECUTION]: Provides routine shell commands for project scaffolding, such as npx create-next-app, npm init, and git init. These operations are limited to project initialization and environment setup.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were detected. The skill actively promotes secure secret management by instructing users to create .env.local files and ensure they are added to .gitignore to prevent exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 03:59 AM
Security Audit — agent-trust-hub — project-starter