graphicode-init
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
cat,mkdir, andcpto initialize project configuration and directory structures. These operations are local to the project environment and align with the skill's stated purpose. - [SAFE]: A validation mechanism is implemented in the project initialization process where user-provided inputs for application names, languages, and environments are verified against a local reference file (
references/config-example.md). This process effectively mitigates risks of command injection or path traversal by ensuring only sanctioned values are used in file system operations.
Audit Metadata