Skills
Navigate
skills/patricio0312rev/skillset/dev-environment-bootstrapper/Gen Agent Trust Hub

dev-environment-bootstrapper

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes instructions to install Volta, a well-known JavaScript tool manager, by downloading and executing a shell script from its official domain.
  • Evidence: curl https://get.volta.sh | bash in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The generated setup scripts facilitate the installation of dependencies from official package registries like NPM and PyPI.
  • Evidence: Commands such as npm install -g pnpm, pnpm install, and pip install -r requirements.txt are included in template scripts.
  • [CREDENTIALS_UNSAFE]: The skill provides a .env.example template containing placeholder values for API keys.
  • Evidence: OPENAI_API_KEY=sk-... and STRIPE_SECRET_KEY=sk_test_... in SKILL.md.
  • Note: These are clearly marked as placeholders for documentation purposes and do not represent actual exposed secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:30 AM
Security Audit — agent-trust-hub — dev-environment-bootstrapper