new-project
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a template markdown file (
_AGENTS.md) from the author's repository (github.com/stonega/harness). This resource is used as a baseline for generating project-specific documentation and does not involve the execution of remote code. - [INDIRECT_PROMPT_INJECTION]: By ingesting a remote template and adapting it to the project structure, the skill provides a surface for processing external instructions. Since the source is the author's own repository, this represents a standard design pattern for scaffolding tools.
- [SAFE]: The stack recommendations (Bun for runtime/package management, Biome for linting, Expo for mobile, and React Router for web) and the associated bootstrap commands follow industry best practices for the specified environments.
Audit Metadata