ai-os-init
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs local file scaffolding and configures defensive hooks and auditing logs.
- [SAFE]: The skill includes a security-enhancing hook (
guard-secrets.sh) that monitors and blocks attempts to write to sensitive file paths like.envor SSH keys. - [SAFE]: The
audit-log.shutility maintains a local record of shell commands for user review and session auditing. - [SAFE]: Project configuration and structure initialization are performed via
scaffold.pyusing idempotent file operations that do not overwrite existing user data.
Audit Metadata