omh-idea-to-deploy
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a "Project Bootstrap Pass" that automates repository initialization (git, README, LICENSE) following standard development practices.
- [SAFE]: The skill includes security-conscious instructions for .gitignore configuration, specifically ensuring that .env files and private keys are excluded from version control to prevent potential credential leakage.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided product ideas to generate implementation plans. While this represents a potential attack surface, the workflow requires explicit success metrics, decision owners, and manual verification gates, which mitigates the risk of unauthorized action execution.
Audit Metadata