cookiecutter
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The instructions involve the use of standard development tools including
rg(ripgrep) for variable discovery and thecookiecutterCLI for rendering and validating templates. These are used in a standard developer context. - [SAFE]: The skill explicitly incorporates security guidelines, instructing the agent to omit secrets, personal identification, and local machine paths from any generated output.
- [SAFE]: Implementation guidance for template hooks (pre- and post-generation scripts) advises against network dependency and the use of hardcoded credentials, which significantly reduces the risk of data exfiltration or unauthorized access.
- [SAFE]: The instructions advocate for robust Jinja templating practices, such as utilizing safe serialization filters like
|tojsonto ensure the integrity of generated source code and prevent injection vulnerabilities in the rendered projects. - [SAFE]: External references are limited to the official documentation and the primary source repository of the reputable Cookiecutter project.
Audit Metadata