init-project
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill collects project metadata and constraints from the user and writes them into the
CLAUDE.mdfile, which provides persistent context for the agent's future behavior in the project. - Ingestion points: User-provided answers for project name, description, business model, and constraints (Step 3).
- Boundary markers: None; user input is interpolated directly into the Markdown template.
- Capability inventory: The agent can execute shell commands, read/write files, and manage dependencies.
- Sanitization: None; instructions mandate using the user's exact wording, which could allow for embedded instructions.
- [DYNAMIC_EXECUTION]: Employs
node -eone-liners to perform search-and-replace operations in the.envfile. This involves concatenating user-provided values into a command-line script, which is a potential surface for command injection if the input contains shell-sensitive characters. - [COMMAND_EXECUTION]: Executes standard initialization commands including
npm installfor dependency management andnpm run db:migratefor database schema setup.
Audit Metadata