environment-bootstrap

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION] (LOW): The skill generates and executes bash scripts (init.sh, smoke-test.sh) to automate environment setup.
  • Evidence: Template scripts in SKILL.md include logic to check prerequisites, manage Docker containers, and run build/test commands.
  • [EXTERNAL_DOWNLOADS] (LOW): Uses package managers to download and install external dependencies.
  • Evidence: pnpm install --frozen-lockfile --silent is used in the init.sh template.
  • [COMMAND_EXECUTION] (LOW): Modifies file permissions to enable script execution.
  • Evidence: Explicit instructions for chmod +x scripts/init.sh in the troubleshooting and setup sections.
  • [COMMAND_EXECUTION] (LOW): Interacts with system services and external CLIs.
  • Evidence: Use of docker-compose, git, and gh (GitHub CLI) to verify authentication and environment status.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:37 PM