ai-os-init
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill scaffolds a project structure using local templates and does not perform any network operations or external downloads.
- [SAFE]: The inclusion of a
guard-secrets.shhook serves as a security enhancement by blocking the agent from writing to files that likely contain sensitive information (e.g.,.env,.pem, private keys). - [SAFE]: The
audit-log.shscript records shell commands to a local file for transparency. The documentation explicitly warns the user that this log may capture secrets typed into commands and provides clear instructions to add the log file to.gitignore. - [SAFE]: The
scaffold.pyscript follows a non-destructive pattern, checking for the existence of files before copying and merging configuration settings instead of overwriting user data. - [SAFE]: No obfuscation, prompt injection, or malicious persistence mechanisms were detected in the scripts or instructions. All hooks are registered through the platform's standard configuration file.
Audit Metadata