foundation
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a structural guide for project initialization and does not contain any malicious code, obfuscation, or exfiltration patterns. It explicitly promotes security best practices, such as ensuring
.gitignoreis in place before any secrets are created and using environment variable examples instead of committing real credentials. - [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands like
git initto set up version control for the new project. These are legitimate, expected operations within the context of a project setup playbook. - [DATA_EXPOSURE]: The instructions are designed to prevent data exposure by guiding the user to exclude sensitive files like
.envandnode_modulesfrom version control. It also advises on asking the user about data sensitivity as part of the initial project assessment.
Audit Metadata