project-launch

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill serves as a documentation-based playbook. It contains guidelines, checklists, and templates for project management, branding, and outreach rather than executable logic.
  • [INDIRECT_PROMPT_INJECTION]: The playbook suggests searching for and reading content from external sources such as GitHub issues, community discussions, and social media threads to identify outreach targets. While this exposes the agent to untrusted external data, the skill provides structured templates and relies on human-in-the-loop workflows for the final outreach, minimizing the risk of automated exploitation.
  • [COMMAND_EXECUTION]: The skill documents the use of standard development tools such as the GitHub CLI (gh), npm, and npx for repository management and distribution. These are listed as part of a manual process for developers and do not constitute silent or unauthorized command execution by the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:06 AM