remote-project-control
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the
Bashtool to run local commands such asgit rev-parseandgh auth status, as well as remote commands throughssh. These operations are fundamental to the skill's purpose of managing remote execution and project synchronization. - [EXTERNAL_DOWNLOADS]: The skill interacts with external Git hosting services and remote servers to perform code synchronization (
git push,git pull) and job monitoring. These network activities are documented and essential for the workflow. - [PROMPT_INJECTION]: The skill reads and processes information from local project files (e.g.,
remote-projects.yaml,current-status.md). This ingestion of data from the file system constitutes a potential surface for indirect prompt injection, which is a common characteristic of agents that interact with project repositories.
Audit Metadata