senior-fullstack
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions and reference guides provide standard architectural patterns and development workflows without any malicious directives or attempts to bypass safety protocols.
- [COMMAND_EXECUTION]: The skill includes Python scripts (project_scaffolder.py and code_quality_analyzer.py) designed for local environment use. These tools perform legitimate file system tasks, such as creating project files from embedded templates and reading source code for analysis, based on user-provided paths.
- [DATA_EXFILTRATION]: The code quality analyzer scans local files for sensitive information like hardcoded secrets. However, the script is entirely local and does not contain any network communication functionality to transmit analyzed data externally.
- [EXTERNAL_DOWNLOADS]: The documentation and templates mention standard package managers (npm, pip) and well-known Docker images (postgres, redis). These references are typical for the described development tasks and do not represent unauthorized external code execution.
Audit Metadata