ac-scaffolding-skill-repos

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill templates include instructions to download the uv package manager installation script from astral.sh, which is the official domain for the well-known Astral development tools.
  • [REMOTE_CODE_EXECUTION]: The test-matrix.sh template script utilizes a curl | sh pattern to install environment dependencies within a Docker container. This pattern is scoped to testing environments and targets a reputable service provider.
  • [SAFE]: The skill integrates standard security and linting tools such as Gitleaks, Ruff, and Codespell. All external references trace back to well-known service providers or the skill author's verified infrastructure, and no malicious patterns such as obfuscation or persistence mechanisms were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:36 AM