project-starter
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known libraries and frameworks from official registries (NPM and PyPI). These include packages like React, Next.js, FastAPI, and Prisma, which are standard in modern development workflows.
- [COMMAND_EXECUTION]: Provides routine shell commands for project scaffolding, such as npx create-next-app, npm init, and git init. These operations are limited to project initialization and environment setup.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were detected. The skill actively promotes secure secret management by instructing users to create .env.local files and ensure they are added to .gitignore to prevent exposure.
Audit Metadata