skills/witooh/neo-plugin/init-project/Gen Agent Trust Hub

init-project

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs shell command execution to initialize and verify the newly created project.
  • The assets/scaffold.py script runs go mod tidy, git init, and go build ./... on the target directory to establish the Go workspace and confirm buildability.
  • The assets/initcheck.py script compiles the service's entry point and executes the resulting binary locally on an ephemeral port to behaviorally confirm the /health endpoint is functional and the service boots without panicking.
  • Several specialist sub-agents (e.g., security, code-reviewer, system-analyzer) are configured to use shell-based tools such as kubectl, psql, argocd, and docker for diagnostics and auditing, though these are governed by Refusal Guards and production safety protocols.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of Go module dependencies during the project initialization phase.
  • Running go mod tidy triggers the retrieval of external packages defined in the template's go.mod file.
  • The template specifically depends on shared libraries from a private GitLab instance (gitlab.awesome-poc-th.com), which requires pre-configured user credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 10:03 AM
Security Audit — agent-trust-hub — init-project