environment-bootstrap

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose of environment bootstrapping.
  • [COMMAND_EXECUTION]: The skill generates and executes shell scripts (init.sh and smoke-test.sh) to automate development tasks such as project building, running tests, and starting local services via Docker Compose. These operations are confined to the local project workspace.
  • [EXTERNAL_DOWNLOADS]: The skill uses pnpm install to fetch project dependencies. This targets official package registries and is a routine operation in modern development workflows.
  • [PRIVILEGE_ESCALATION]: The skill includes instructions to apply chmod +x to local scripts within the project directory to make them executable. This is a standard file system operation and does not involve escalating system-level privileges or bypassing security controls.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:49 AM