greenfield
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several shell operations using the
bunruntime to manage the project lifecycle. This includes adding dependencies (bun add), running unit tests (bun test), executing linters (bun run lint), and performing type checks (bun run typecheck). These commands are standard for the tool's purpose of project initialization and validation. - [EXTERNAL_DOWNLOADS]: The skill triggers external downloads via
bun addto fetch packages from the public npm registry. It follows security best practices by instructing the agent to pin dependencies to concrete versions rather than using floating tags like 'latest'. - [COMMAND_EXECUTION]: The skill interacts with the local file system to read template assets and configuration checklists from a specific local path (
~/.claude/skills/atelier/). It also configures git hooks, which is a standard procedure for enforcing project standards during the commit process.
Audit Metadata