setup-development-policy
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references a setup command using a package runner to install the skill from the author's GitHub repository. This is a standard installation procedure for this type of tool and targets resources provided by the vendor.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize standard Git commands (such as
git ls-filesandgit check-ignore) to inspect the project's tracking state. These operations are intended for environment discovery and ensuring that policy files are correctly managed within the local repository. - [INDIRECT_PROMPT_INJECTION]: The skill ingests project-level configuration files (like
package.jsonor existing markdown policies) to identify the current development setup. The instructions include explicit safeguards to prevent the output of sensitive information and to handle platform-specific pathing correctly, which mitigates the risk of processing untrusted data.
Audit Metadata