multi-module-scaffolder
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python scaffolding script (scripts/scaffold.py). The script's logic is transparent and focused solely on generating project files from templates based on user-provided names and packages.- [PROMPT_INJECTION]: The instructions follow a clear, task-oriented structure without attempts to bypass safety filters or override system instructions. Input parameters are validated via regex in the execution script, mitigating potential injection risks through the command line.- [DATA_EXFILTRATION]: No network operations or sensitive data access patterns were found. The skill operates entirely on the local file system within a user-defined output directory.- [EXTERNAL_DOWNLOADS]: The skill does not perform external downloads during its execution. While the generated project files reference standard Maven Central repositories for dependency management, the scaffolding process itself is self-contained.
Audit Metadata