create-project
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): The project initialization script
scripts/create-project.pyimplements secure coding practices, including strict input validation using regular expressions for project names and IDs. It usespathlibfor file system operations, which effectively prevents directory traversal attacks. No remote dependencies, network operations, or hardcoded credentials were found.- Indirect Prompt Injection (SAFE): Whilereferences/project-types.mddefines an 'AI Research Checklist' that directs the agent to scan codebase files for dependencies, this behavior is a core functional requirement of the skill and does not include instructions to execute or trust external content blindly. The ingestion of untrusted data is mitigated by the agent's internal safety protocols and the script's name sanitization.
Audit Metadata