ac-scaffolding-skill-repos
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates include instructions to download the
uvpackage manager installation script fromastral.sh, which is the official domain for the well-known Astral development tools. - [REMOTE_CODE_EXECUTION]: The
test-matrix.shtemplate script utilizes acurl | shpattern to install environment dependencies within a Docker container. This pattern is scoped to testing environments and targets a reputable service provider. - [SAFE]: The skill integrates standard security and linting tools such as Gitleaks, Ruff, and Codespell. All external references trace back to well-known service providers or the skill author's verified infrastructure, and no malicious patterns such as obfuscation or persistence mechanisms were detected.
Audit Metadata