froq-create-repo
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates in
references/setting-up.mdinclude GitHub Actions workflows that reference external repository resources (sxzz/workflows). It also references well-known services likebadgen.netandstar-history.comfor README assets.\n- [INDIRECT_PROMPT_INJECTION]: The skill generates repository documentation by interpolating user-provided information into placeholders withinreferences/readme/templates. While the templates use markdown code fences to delimit content, they represent a potential surface for indirect prompt injection if the user-supplied metadata contains instructions intended for downstream agents.\n- [DYNAMIC_EXECUTION]: Thereferences/setting-up.mdfile provides apackage.jsontemplate that includes lifecycle scripts for running external tools, such asnpx simple-git-hooks. This is a standard development workflow for project initialization.
Audit Metadata