javascript-typescript-typescript-scaffold

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions to run standard development commands for project initialization, such as creating directories, initializing Git repositories, and using package managers (npm, pnpm). These are routine tasks for the stated purpose of project scaffolding.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted scaffolding utilities including create-next-app and create-vite. It also recommends installing pnpm via npm. These tools are official resources from reputable organizations (Vercel, Vite community) and do not represent a security threat.
  • [SAFE]: The skill demonstrates safe credential management practices by explicitly instructing the agent to add .env files to .gitignore to prevent accidental exposure of sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 03:59 PM
Security Audit — agent-trust-hub — javascript-typescript-typescript-scaffold