create-aptos-project
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx create-aptos-dappto fetch and execute the project scaffolding tool. This is a standard utility for the Aptos development ecosystem. - [COMMAND_EXECUTION]: Executes shell commands for project initialization, compilation, testing, and version control, including
npx,aptos init,npm run, andgit. - [PROMPT_INJECTION]: The skill includes instructions to the agent to enforce security practices, such as masking private keys and managing environment file visibility. It also involves processing user-supplied project names.
- Ingestion point: User-provided project name.
- Boundary markers: Absent.
- Capability inventory:
npx,aptos,npm,git. - Sanitization: The skill advises on project name formatting but does not implement strict programmatic validation.
Audit Metadata