project-bootstrap

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard CLI tools such as git, npm, uv, and cargo for project initialization and running local tests.
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation and release information from well-known platforms (GitHub, ESLint, Prettier, and various ecosystem maintainers) to verify current tool configurations.
  • [REMOTE_CODE_EXECUTION]: The skill uses package runners like npx and uv run to execute development tools, while providing clear guidelines for auditing dependencies and managing supply chain risks.
  • [CREDENTIALS_UNSAFE]: The skill includes explicit instructions to prevent the exposure of secrets by ignoring .env files in version control and utilizing placeholder-based configuration templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 07:52 PM