boot-templates
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): Documentation instructs the user or agent to clone multiple repositories from GitHub (e.g., github.com/kirklin/boot-backend-go-clean.git). This source is not on the 'Trusted Organizations' list provided in the security skill protocols.
- [REMOTE_CODE_EXECUTION] (MEDIUM): The skill utilizes
npx degitto fetch project templates from remote GitHub repositories. This pattern downloads remote code which is then intended for local installation and execution via subsequent commands likenpm run devorgo run. - [COMMAND_EXECUTION] (LOW): The setup guides include various shell commands for environment configuration, dependency management, and application execution across multiple environments (e.g.,
pnpm install,poetry run,flask run, andsedfor generating secret keys).
Audit Metadata