froq-create-repo

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill templates in references/setting-up.md include GitHub Actions workflows that reference external repository resources (sxzz/workflows). It also references well-known services like badgen.net and star-history.com for README assets.\n- [INDIRECT_PROMPT_INJECTION]: The skill generates repository documentation by interpolating user-provided information into placeholders within references/readme/ templates. While the templates use markdown code fences to delimit content, they represent a potential surface for indirect prompt injection if the user-supplied metadata contains instructions intended for downstream agents.\n- [DYNAMIC_EXECUTION]: The references/setting-up.md file provides a package.json template that includes lifecycle scripts for running external tools, such as npx simple-git-hooks. This is a standard development workflow for project initialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 09:12 AM