scaffold-exercises

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell commands such as mkdir, git mv, and git commit to manage the project's directory structure and version control history. These commands are used as intended for repository scaffolding.- [COMMAND_EXECUTION]: The skill invokes pnpm ai-hero-cli internal lint to validate the created structure. This is a local linting operation consistent with the skill's primary purpose of ensuring exercise consistency.- [INDIRECT_PROMPT_INJECTION]: The skill processes an external "plan" (e.g., a list of exercise names) to determine the directory structure. While this involves ingesting external data, the capabilities triggered—creating folders and minimal text files—are low-risk and restricted to the local workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 04:24 PM
Security Audit — agent-trust-hub — scaffold-exercises