javascript-typescript-typescript-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes project scaffolding tools from well-known sources, including Next.js and Vite, to generate application templates.
- [COMMAND_EXECUTION]: Employs standard shell commands to install the pnpm package manager globally and initialize local file system structures, including git repositories and project directories.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements through the $ARGUMENTS variable to determine the project type and configuration. While this represents an attack surface for untrusted data, the subsequent actions (template selection and file generation) are scoped to legitimate development tasks and do not involve high-risk execution of unvalidated input.
Audit Metadata