project-init

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command`` syntax to retrieve the current directory path, Git username, and the path to the GitHub CLI. These operations are used to provide environment context for project setup and do not involve sensitive data access or network exfiltration.
  • [EXTERNAL_DOWNLOADS]: The configuration for pre-commit references standard hooks from the official pre-commit-hooks repository on GitHub. Additionally, GitHub Action workflows use the official actions/checkout action. These are well-known and established sources for project automation tooling.
  • [COMMAND_EXECUTION]: The skill executes standard development tools including mkdir, git, gh (GitHub CLI), and pre-commit. These commands are used within the expected scope of initializing a local directory and an optional remote repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 01:18 AM