create-claude-md

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to organize project documentation. It creates a docs/ directory structure and a CLAUDE.md table of contents based on the project's detected framework and package manager.
  • [DATA_EXPOSURE]: While the skill reads local configuration files such as package.json and existing documentation to migrate content, these operations are restricted to the local project context and are necessary for the skill's stated purpose. There are no indications of data being sent to external endpoints.
  • [EXTERNAL_DOWNLOADS]: The skill lists a dependency on jonmumm/skills@adr-keeper. This is a resource from the same author and follows standard modularity practices for AI agent skills.
  • [COMMAND_EXECUTION]: The skill instructs the agent to detect existing scripts in package.json for informational reporting but does not execute arbitrary code or shell commands autonomously.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 03:09 AM
Security Audit — agent-trust-hub — create-claude-md