erf-init
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
powershell.exeto execute a local script (scripts/init.ps1) to generate the report structure. This is a standard and expected behavior for a developer scaffolding tool. - [REMOTE_CODE_EXECUTION]: No remote code execution was detected. The scripts use Python and PowerShell to generate local files based on user input, with proper XML escaping and path joining.
- [DATA_EXFILTRATION]: No network operations or data exfiltration attempts were found. The tool operates strictly on the local filesystem to create report templates.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or attempts to access sensitive system files (like SSH keys or AWS configs) were observed.
Audit Metadata