init
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The implementation uses the local git CLI to manage repository branches, including renaming 'master' to 'main', creating a 'dev' branch, and performing initial commits. These commands are executed within the context of the user's project directory.
- [EXTERNAL_DOWNLOADS]: The skill provides templates for Next.js, Python, and Rust which define dependencies from standard package registries (NPM, PyPI, and Crates.io). It also references the use of standard ecosystem tools such as Bun, uv, and Cargo for dependency installation and project building.
- [SAFE]: The skill modifies the user's home directory configuration for the 'worktrunk' utility (
~/.config/worktrunk/config.toml) to enable specific workflow features like worktree paths. This is a transparent operation documented in the skill's usage guide. - [SAFE]: Files required for the agent workflow (agents, prompts, and scripts) are symlinked from the global workflow root into the project's local
.pi/directory. This maintains a single source of truth for the automation logic without duplicating code across projects.
Audit Metadata