project-wizard

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to set up the development environment.
  • Initializes Git repositories locally using git init.
  • Configures GitHub repositories using the gh CLI, including branch protection and security features.
  • Installs the pre-commit package via pip.
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration and tools from external sources.
  • Downloads pre-commit hooks from well-known repositories: pre-commit/pre-commit-hooks, gitleaks/gitleaks, and commitizen-tools/commitizen.
  • Installs the pre-commit Python package.
  • [SAFE]: The skill demonstrates a strong security posture by default.
  • Integrates gitleaks into the pre-commit workflow to prevent credential leakage.
  • Automatically enables GitHub's native secret scanning and push protection via API calls.
  • Configures branch protection rules to ensure code quality and security on the main branch.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 11:09 AM