environment-bootstrap
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose of environment bootstrapping.
- [COMMAND_EXECUTION]: The skill generates and executes shell scripts (
init.shandsmoke-test.sh) to automate development tasks such as project building, running tests, and starting local services via Docker Compose. These operations are confined to the local project workspace. - [EXTERNAL_DOWNLOADS]: The skill uses
pnpm installto fetch project dependencies. This targets official package registries and is a routine operation in modern development workflows. - [PRIVILEGE_ESCALATION]: The skill includes instructions to apply
chmod +xto local scripts within the project directory to make them executable. This is a standard file system operation and does not involve escalating system-level privileges or bypassing security controls.
Audit Metadata