project-create
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill. All operations are consistent with the stated purpose of project bootstrapping.
- [COMMAND_EXECUTION]: The skill uses standard CLI tools (mkdir, git, gh, npm) to automate project setup. It interpolates the user-provided into these commands, which is expected behavior for a scaffolding tool.
- Ingestion points: User-supplied argument.
- Boundary markers: None.
- Capability inventory: Shell command execution via mkdir, git, gh, npm, and touch in SKILL.md.
- Sanitization: Not explicitly implemented within the skill instructions; relies on agent/platform input handling.
- [DATA_EXFILTRATION]: The skill implements protective measures for sensitive data by automatically adding environment files (.env, .env.local) to the .gitignore file, following industry best practices to prevent accidental exposure of credentials.
Audit Metadata