agent-repo-init
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/init_project.py executes git init via subprocess.run. The execution is secure as it uses a fixed argument list and the working directory is derived from resolved and validated user input.
- [SAFE]: Path handling uses pathlib.Path.resolve and internal logic to prevent directory traversal or unintentional recursive file copying.
- [SAFE]: User inputs are strictly validated using argparse choices and a restrictive regular expression for project names to ensure sanitized project creation.
Audit Metadata