project-bootstrap
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard CLI tools such as
git,npm,uv, andcargofor project initialization and running local tests. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and release information from well-known platforms (GitHub, ESLint, Prettier, and various ecosystem maintainers) to verify current tool configurations.
- [REMOTE_CODE_EXECUTION]: The skill uses package runners like
npxanduv runto execute development tools, while providing clear guidelines for auditing dependencies and managing supply chain risks. - [CREDENTIALS_UNSAFE]: The skill includes explicit instructions to prevent the exposure of secrets by ignoring
.envfiles in version control and utilizing placeholder-based configuration templates.
Audit Metadata