✓
Third-party audit

Gen Agent Trust Hub

project-architecture · c3sc0-v4113/scaffold

Passed
Provider summary

The skill is designed to enforce architectural patterns in Next.js and Astro projects. It identifies the framework by reading project configuration files and locally installed documentation. While the skill is functional and follows best practices, it exhibits a surface for indirect prompt injection by processing data from the project environment (like package manifests and node_modules) and utilizes dynamic discovery to load additional instruction sets from the local filesystem.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
Sep 25, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.