scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands such as
mkdir,git mv, andgit committo manage the project's directory structure and version control history. These commands are used as intended for repository scaffolding.- [COMMAND_EXECUTION]: The skill invokespnpm ai-hero-cli internal lintto validate the created structure. This is a local linting operation consistent with the skill's primary purpose of ensuring exercise consistency.- [INDIRECT_PROMPT_INJECTION]: The skill processes an external "plan" (e.g., a list of exercise names) to determine the directory structure. While this involves ingesting external data, the capabilities triggered—creating folders and minimal text files—are low-risk and restricted to the local workspace.
Audit Metadata