create-aptos-project

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx create-aptos-dapp to fetch and execute the project scaffolding tool. This is a standard utility for the Aptos development ecosystem.
  • [COMMAND_EXECUTION]: Executes shell commands for project initialization, compilation, testing, and version control, including npx, aptos init, npm run, and git.
  • [PROMPT_INJECTION]: The skill includes instructions to the agent to enforce security practices, such as masking private keys and managing environment file visibility. It also involves processing user-supplied project names.
  • Ingestion point: User-provided project name.
  • Boundary markers: Absent.
  • Capability inventory: npx, aptos, npm, git.
  • Sanitization: The skill advises on project name formatting but does not implement strict programmatic validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 06:52 PM