setup-project
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides the official installation command for the Bun runtime, which involves fetching and executing a shell script from bun.sh.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of common development tools including the GitHub CLI, Supabase CLI, Vercel CLI, Wrangler, and Turso via established package managers like Homebrew and NPM.
- [COMMAND_EXECUTION]: Uses local shell commands such as
which,ls,cat, andgrepto identify the project stack and check for the presence of specific utility tools in the user's environment. - [DATA_EXFILTRATION]: While the skill reads local configuration files like
package.jsonandpyproject.toml, it does so to automate local project setup and does not transmit this data to external servers. - [PROMPT_INJECTION]: The skill follows a structured workflow for environment discovery and does not contain instructions that attempt to bypass safety filters or override agent behavior.
Audit Metadata