paw-cra-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs standard project setup and configuration tasks consistent with its documentation.
- [DATA_EXFILTRATION]: The skill collects API keys but stores them in a local
.pawbytes/config/config.user.yamlfile, following the best practice of keeping secrets out of committed project configuration. No network exfiltration or unauthorized data access was found. - [COMMAND_EXECUTION]: The skill uses local Python scripts and standard shell commands (
mkdir -p) to perform setup tasks. These scripts perform standard file merging operations using safe libraries likepyyamlandcsv. - [EXTERNAL_DOWNLOADS]: Script dependencies are restricted to
pyyaml, a well-known and trusted package for YAML processing.
Audit Metadata