project-scaffold
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/scaffold.pyto perform environment checks and initialize Git repositories using thegit initcommand. - [COMMAND_EXECUTION]: The scaffolding process invokes an external local script located within the
agent-folder-initskill directory (targeting~/.codex/skills,~/.claude/skills, or~/.cursor/skills) to set up agent-specific documentation. - [SAFE]: The script generates comprehensive project manifests and configuration files (e.g.,
package.json,tsconfig.json,biome.json, andDockerfile) for multiple frameworks, adhering to standard development practices. - [SAFE]: All file system operations and command executions are driven by user input collected through interactive CLI prompts, ensuring the user remains in control of the project's root path and components.
Audit Metadata