project-setup
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches project blueprints, configuration fragments, and Dockerfiles from the vendor-owned
loxosceles/project-blueprintsrepository on GitHub. - [EXTERNAL_DOWNLOADS]: It instructs the agent to clone the
loxosceles/devcontainer-staterepository to set up necessary local environment state. - [REMOTE_CODE_EXECUTION]: Executes the
npx skills addcommand, which downloads and runs the author'sloxosceles/ai-devpackage from the npm registry. - [COMMAND_EXECUTION]: Directs the agent to sequentially execute commands and configuration steps defined within the remote blueprint files.
- [COMMAND_EXECUTION]: Involves file system operations such as directory creation (
mkdir -p) and providing the user withsudocommands to resolve potential Docker permission issues manually.
Audit Metadata