do-init
Initializes a project for Maverick by verifying GitHub App, installing CLI, and setting up project configurations.
Install this skill
or
65/100
Security score
The do-init skill was audited on Jul 27, 2026 and we found 5 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 33
Template literal with variable interpolation in command context
SourceSKILL.md
| 33 | - Read the plugin version: `grep -Po '(?<=^version = ")[^"]+' "${CLAUDE_PLUGIN_ROOT}/pyproject.toml"` |
medium line 28
Access to hidden dotfiles in home directory
SourceSKILL.md
| 28 | **If `maverick` is not on PATH**, dispatch the **/maverick:do-install** skill and wait for it to complete. After the install returns, re-run `command -v maverick` to confirm the binary is now resolvab |
medium line 64
Access to hidden dotfiles in home directory
SourceSKILL.md
| 64 | > `~/.maverick/maverick-gh-app.pem` (or any path you prefer). |
medium line 67
Access to hidden dotfiles in home directory
SourceSKILL.md
| 67 | > 4. Add a `gh_app` block to `~/.maverick/config.json`: |
medium line 74
Access to hidden dotfiles in home directory
SourceSKILL.md
| 74 | > "private_key_path": "~/.maverick/maverick-gh-app.pem" |
Scanned on Jul 27, 2026
View Security Dashboard