project-setup

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches project blueprints, configuration fragments, and Dockerfiles from the vendor-owned loxosceles/project-blueprints repository on GitHub.
  • [EXTERNAL_DOWNLOADS]: It instructs the agent to clone the loxosceles/devcontainer-state repository to set up necessary local environment state.
  • [REMOTE_CODE_EXECUTION]: Executes the npx skills add command, which downloads and runs the author's loxosceles/ai-dev package from the npm registry.
  • [COMMAND_EXECUTION]: Directs the agent to sequentially execute commands and configuration steps defined within the remote blueprint files.
  • [COMMAND_EXECUTION]: Involves file system operations such as directory creation (mkdir -p) and providing the user with sudo commands to resolve potential Docker permission issues manually.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 01:48 PM