skills/openai/plugins/bootstrap/Gen Agent Trust Hub

bootstrap

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution for Project Setup:
  • The skill executes several shell commands to automate the development environment setup. This includes using the Vercel CLI (vercel link, vercel env pull, vercel env add) to synchronize configuration and managing database operations via repository-defined scripts (npm run db:push). These are typical operations for a bootstrapping utility.
  • External Resource Integration:
  • The skill references and downloads components using npx shadcn@latest add, which is a common practice for initializing UI foundations in Next.js projects. It also interacts with the Vercel platform to provision integrations like Neon Postgres, which is expected behavior for an orchestrator focusing on Vercel-linked resources.
  • Environment Variable Management:
  • There is a clear security consideration regarding the handling of sensitive environment variables. The skill generates an AUTH_SECRET and stores it directly in the Vercel environment without printing it to the console, following best practices for secret management. It also compares environment templates with local files to ensure required keys are present without exposing their values.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:11 PM