saas-product-generator
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/scaffold.sh) designed to automate project directory creation. The script implements defensive programming by validating the user-provided product name against a strict regular expression (^[a-z0-9][a-z0-9_-]*$) and explicitly checking for path traversal characters such as..,/, and\. These measures ensure that the file system operations are restricted to safe, locally-created directories.
Audit Metadata