project-setup
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves project blueprints, configuration fragments, and templates from the
loxosceles/project-blueprintsrepository on GitHub. - [REMOTE_CODE_EXECUTION]: The setup process uses
npxto install and execute theloxosceles/ai-devpackage. This involves downloading and running code from a remote registry to extend the agent's capabilities. - [COMMAND_EXECUTION]: The skill performs various shell operations to initialize the environment, including creating nested directory structures under
~/.devcontainer-state/cache/for tool settings and state management. - [PRIVILEGE_ESCALATION]: The instructions include a troubleshooting step that suggests the user run
sudo rm -rfto clear a specific local directory if it was created with incorrect permissions by Docker. This is presented as a manual fix for the user rather than an automated action by the agent.
Audit Metadata