skills/lvtd-llc/skills/cookiecutter/Gen Agent Trust Hub

cookiecutter

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The instructions involve the use of standard development tools including rg (ripgrep) for variable discovery and the cookiecutter CLI for rendering and validating templates. These are used in a standard developer context.
  • [SAFE]: The skill explicitly incorporates security guidelines, instructing the agent to omit secrets, personal identification, and local machine paths from any generated output.
  • [SAFE]: Implementation guidance for template hooks (pre- and post-generation scripts) advises against network dependency and the use of hardcoded credentials, which significantly reduces the risk of data exfiltration or unauthorized access.
  • [SAFE]: The instructions advocate for robust Jinja templating practices, such as utilizing safe serialization filters like |tojson to ensure the integrity of generated source code and prevent injection vulnerabilities in the rendered projects.
  • [SAFE]: External references are limited to the official documentation and the primary source repository of the reputable Cookiecutter project.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:39 AM
Security Audit — agent-trust-hub — cookiecutter