skills/thulr/harness-engineering-bootstrap/harness-engineering-bootstrap-greenfield/Gen Agent Trust Hub
harness-engineering-bootstrap-greenfield
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a structured workflow with built-in confirmation checkpoints (e.g., after the initial scaffolding gate), ensuring the user maintains control over the project's setup and configuration.
- [COMMAND_EXECUTION]: Local shell scripts (
check-greenfield.shandlint-content.sh) are used to verify the repository environment and validate the quality of generated content. It also guides the agent to use standard tools likegit,pnpm, and theghCLI for repository initialization and configuration. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install standard development dependencies (e.g.,
typescript,vitest,eslint) from official registries, which is a routine part of the supported project stacks. - [SAFE]: Repository security features, including branch protection rules and mandatory PR reviews, are established using the official GitHub CLI as part of the intended engineering bootstrap process to ensure a secure development environment.
Audit Metadata