project-bootstrap
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates project initialization by instructing the agent to run standard setup commands like
npm install,pip install, andgit commitafter scaffolding. - [EXTERNAL_DOWNLOADS]: The generated configuration files reference trusted and well-known repositories for CI/CD and security linting, including official GitHub Actions and Gitleaks.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface when reading local manifests (
package.json,pyproject.toml) to determine the stack. Ingestion points: local manifest files; Boundary markers: absent; Capability inventory:npm install,pip install,git commit; Sanitization: absent. No sensitive data is processed or exfiltrated.
Audit Metadata