app-builder
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is informational in nature, providing guidelines, project structures, and technology recommendations for scaffolding new projects without performing automated actions itself.\n- [SAFE]: The frontmatter explicitly limits the skill to the 'Read' tool, effectively preventing the execution of arbitrary commands, network exfiltration, or unauthorized file writes.\n- [SAFE]: Includes explicit instructions to follow security best practices, such as mandatory use of .env.example files, confirming stack selections with users, and avoiding end-of-life dependencies.\n- [SAFE]: Analysis of the project templates and technical 'Gotchas' reveals no hidden commands, obfuscated content, or unauthorized remote resource fetching.
Audit Metadata