env-setup
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs routine environment detection by checking for the presence of common files like 'package.json', 'requirements.txt', or '.go' extensions.
- [DATA_EXPOSURE]: Analysis of the code confirms that it only reads file names within the sandbox directory to identify the project stack. No file contents are read, and no data is transmitted externally.
- [COMMAND_EXECUTION]: The script does not invoke shell commands, spawn subprocesses, or use dynamic execution functions like eval().
- [PROMPT_INJECTION]: The instructions in SKILL.md are purely functional and do not attempt to override the agent's safety protocols or core behavior.
Audit Metadata