create-r-project
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs standard project initialization tasks including directory creation and template generation. No suspicious network activity, credential handling, or obfuscation was detected.- [SAFE]: The use of renv and the generation of a .Rprofile file are standard practices for R project-local package management and do not constitute a malicious persistence risk in this context.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided parameters to define the project structure, representing an attack surface for indirect prompt injection.
- Ingestion points: User-provided
project_nameandproject_typeparameters in SKILL.md. - Boundary markers: None present to isolate user-provided inputs within the file generation instructions.
- Capability inventory: Directory creation, file writing, and Git repository initialization.
- Sanitization: No explicit sanitization or validation of input parameters is defined in the instructions.
Audit Metadata