project-wizard
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to set up the development environment.
- Initializes Git repositories locally using
git init. - Configures GitHub repositories using the
ghCLI, including branch protection and security features. - Installs the
pre-commitpackage viapip. - [EXTERNAL_DOWNLOADS]: The skill fetches configuration and tools from external sources.
- Downloads pre-commit hooks from well-known repositories:
pre-commit/pre-commit-hooks,gitleaks/gitleaks, andcommitizen-tools/commitizen. - Installs the
pre-commitPython package. - [SAFE]: The skill demonstrates a strong security posture by default.
- Integrates
gitleaksinto the pre-commit workflow to prevent credential leakage. - Automatically enables GitHub's native secret scanning and push protection via API calls.
- Configures branch protection rules to ensure code quality and security on the main branch.
Audit Metadata