proj-init
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs expected project initialization tasks, including directory creation and file updates within a defined workspace (
projects/{slug}/). No external network requests or suspicious command executions were found. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied
slugandintentstrings which are written toREADME.md,index.md, andlog.md. - Ingestion points:
Inputssection definesslugandintentas user-provided data. - Boundary markers: None explicitly defined in the templates or instructions.
- Capability inventory: File system write operations (
mkdir, template rendering, file appending). - Sanitization: The instructions require the
slugto be lowercase and hyphenated, providing basic structural validation. This is a standard risk profile for documentation-focused skills.
Audit Metadata