light-project-structure
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/scaffold.pyscript usessubprocess.runto initialize version control and data tracking by executinggit initanddvc init. These commands are executed with hardcoded argument lists, and the target directory is resolved from user input, which is a safe and intended functionality of a project scaffolding tool. - [EXTERNAL_DOWNLOADS]: The
templates/pre-commit-config.template.yamlfile references external pre-commit hooks from theastral-shandpre-commitGitHub organizations. These are well-known, trusted development tools used for code linting and formatting. - [DATA_EXPOSURE]: The skill instructions include steps to analyze existing project files, such as
README.mdand setup scripts, to assist in organizing legacy projects. This behavior is consistent with the skill's primary purpose and involves reading local project data within the agent's operating context.
Audit Metadata