project-quality-gates
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes the use of industry-standard development and security tools such as
oxlint,vitest,playwright,gitleaks,semgrep, andosv-scannerfor repository maintenance. - [SAFE]: GitHub Actions templates provided in the skill use pinned commit SHAs (e.g.,
actions/checkout@11d5960a326750d5838078e36cf38b85af677262), which is a security best practice to protect against supply-chain attacks targeting action versions. - [SAFE]: The skill includes dedicated security tiers (Tier 3) focused on detecting leaked secrets in Git history and identifying dependency vulnerabilities using reputable open-source tools.
- [SAFE]: All installation commands for tools (
npm,brew,pip) target well-known packages and official registries, representing standard development environment setup.
Audit Metadata