scaffold-project
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run various command-line interface (CLI) tools, such as framework generators (e.g.,
create-react-app,npm init) and package manager scripts, to initialize and configure new projects. - [EXTERNAL_DOWNLOADS]: It fetches software packages, language servers, and dependencies from official package registries like NPM and PyPI, following instructions to use official documentation as the primary source for commands.
- [DATA_EXPOSURE]: The skill requires permissions to write to the local file system to create the new project structure, but it includes safety checks to ensure the target directory is confirmed and empty before proceeding.
Audit Metadata