project-setup-git
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading project source code from external repositories using the
git clonecommand. - [COMMAND_EXECUTION]: It executes multiple shell commands to manage the project lifecycle, including
git pullfor updates,npm install(or Yarn/PNPM equivalents) for dependency management, andcpfor environment file configuration. - [REMOTE_CODE_EXECUTION]: The workflow involves running scripts defined in external repositories (e.g.,
npm run dev), which leads to the execution of code downloaded from remote sources. - [DATA_EXFILTRATION]: The skill handles sensitive configuration files (
.env), but proactively instructs the agent to ensure they are excluded from version control via.gitignoreand warns against public exposure of API keys and tokens.
Audit Metadata