dev-setup
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a legitimate project bootstrapping tool. It manages the creation of configuration files and templates (e.g., PR templates, issue templates, ESLint configs) by copying them from its local assets directory to the user's project root.
- [COMMAND_EXECUTION]: The skill executes standard package management commands (
pnpm installorbun install) to resolve project dependencies. It also performs achmod +xoperation on generated git hook scripts to ensure they are functional within the local development environment, which is expected behavior for Husky integration. - [EXTERNAL_DOWNLOADS]: The skill configures project dependencies using reputable packages from the npm registry and sets up GitHub Actions workflows that pull official actions from well-known organizations including GitHub, pnpm, and oven-sh.
Audit Metadata