Initialize Project Structure

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:57 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed project-scaffolding workflow with no hidden execution, exfiltration, or persistence beyond the project files it says it creates.

Review the generated CLAUDE.md before adopting it because it will guide future agent behavior, especially branch and staging deployment conventions. Do not place real credentials in tracked files; the skill correctly uses gitignored placeholders for local secrets.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 85% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.

Pitfall — workspace version conflicts from scaffold boilerplate. When scaffolding from create-turbo or similar generators, inspect every packages/*/package.json for version conflicts before writing the workspaces array as "packages/*". A scaffolded packages/ui/ may declare "react": "^19.2.0" which will conflict with your project's React 18 pin during npm ci. Even if the package is never imported, npm resolves ALL workspace packages' dependencies. Fix by either:

1. Deleting unused scaffold packages: rm -rf packages/ui
2. Explicitly listing workspace packages instead of using a wildcard:

   json

   "workspaces": [
   

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 85% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/CLAUDE-template-full.md (reported line 27)May include surrounding context.

(local) (Railway) (Railway production)

text

| Branch  | Env        | Auto-deploy | Notes                                  |
|---------|------------|-------------|----------------------------------------|
| develop | local      | no          | Docker / dev DB                        |
| staging | Railway    | yes         | integration testing — default target   |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 85% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/CLAUDE-template-simple.md (reported line 24)May include surrounding context.

(local) (Railway) (Railway production)

text

| Branch  | Env        | Auto-deploy | Notes                                  |
|---------|------------|-------------|----------------------------------------|
| develop | local      | no          | Docker / dev DB                        |
| staging | Railway    | yes         | integration testing — default target   |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 85% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/TECHNICAL-DOCUMENTATION-template.md (reported line 118)May include surrounding context.

(local) (Railway) (Railway production)

text

| Branch  | Env        | Auto-deploy | Notes                                  |
|---------|------------|-------------|----------------------------------------|
| develop | local      | no          | Docker / dev DB                        |
| staging | Railway    | yes         | integration testing — default target   |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 85% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/TECHNICAL-DOCUMENTATION-template.md (reported line 121)May include surrounding context.

md

| Branch | Environment | Auto-deploy | Notes |
|--------|-------------|-------------|-------|
{{#BRANCHES}}
| `{{branch}}` | {{env}} | {{auto_deploy}} | {{notes}} |
{{/BRANCHES}}

Connection strings live in `CLAUDE.local.md` (gitignored).

Static analysis

No suspicious patterns detected.