setup-snappedly-skills
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a management tool for repository-level AI instructions and process documentation. Its operations are transparent and focused on structured text updates to markdown configuration files.
- [SAFE]: Network interactions are limited to official GitHub API endpoints and command-line operations using the 'gh' CLI. The instructions explicitly direct the agent to never record credentials and to verify authenticated connections before performing operations.
- [SAFE]: A robust multi-step confirmation process (Align, Confirm, and Write steps) is enforced. The agent must inventory the repository, present proposed changes for each section, and show a final diff for user approval. This human-in-the-loop requirement effectively mitigates potential risks from processing untrusted content during repository setup.
- [SAFE]: No indicators of malicious activity such as obfuscation, unauthorized data exfiltration, remote code execution from untrusted sources, or persistence mechanisms were detected. The skill's behavior is consistent with its stated purpose of project initialization and maintenance for the Snappedly ecosystem.
Audit Metadata