kf-g-project-bootstrap-new-project-rules
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to guide a developer or AI agent through the process of setting up a new project. It emphasizes security measures such as gitleaks for secret detection and pnpm workspace settings to prevent supply chain attacks (e.g.,
minimumReleaseAge,blockExoticSubdeps). - [SAFE]: The skill references established tools and practices (mise, pnpm, Vite, pre-commit) and provides templates for configuration files. All external references, such as the gitleaks action or the vendor's own repository, are legitimate.
- [SAFE]: The automated hooks for linting and formatting (
lint-fmt-hooks.md) are standard features in modern AI-assisted development environments to maintain code quality. The provided shell script template for these hooks implements afail-openstrategy to ensure development workflows are not unnecessarily blocked. - [SAFE]: The project bootstrap workflow includes clear manual checkpoints for the user to approve the planned rules before any scaffolding or file creation begins, ensuring transparency and user control.
Audit Metadata