foundation

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a structural guide for project initialization and does not contain any malicious code, obfuscation, or exfiltration patterns. It explicitly promotes security best practices, such as ensuring .gitignore is in place before any secrets are created and using environment variable examples instead of committing real credentials.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands like git init to set up version control for the new project. These are legitimate, expected operations within the context of a project setup playbook.
  • [DATA_EXPOSURE]: The instructions are designed to prevent data exposure by guiding the user to exclude sensitive files like .env and node_modules from version control. It also advises on asking the user about data sensitivity as part of the initial project assessment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 07:44 AM
Security Audit — agent-trust-hub — foundation