app-builder
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download project initialization scripts and packages from official and well-known sources. For example, it references the official Ktor installer script from 'https://start.ktor.io/install.sh' and standard project generators like 'create-next-app' and 'nuxi'.
- [COMMAND_EXECUTION]: The project templates provide common shell commands for development workflows, including package installation ('npm install', 'pip install'), database management ('prisma db push', 'alembic upgrade head'), and application execution ('npm run dev', 'dotnet run'). These are standard and safe within the context of project scaffolding.
- [SAFE]: The skill uses environment variable placeholders and standard local development defaults for configuration, which is consistent with secure development practices for project templates.
Audit Metadata