gitnexus-lfg
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary task descriptions provided by the user, which are then passed into the context of secondary planning and implementation skills.
- Ingestion points: The
<task description>and plan file paths ingested inSKILL.mdandREADME.md. - Boundary markers: Absent; the skill does not explicitly wrap or delimit user-provided task descriptions before forwarding them to sub-skills.
- Capability inventory: The orchestration involves triggering
gitnexus-work, which possesses the capability to perform filesystem writes and create git commits. - Sanitization: No sanitization or validation of the input task string is performed by this orchestrator.
- [EXTERNAL_DOWNLOADS]: The skill's configuration downloads and executes a specific tool from an external package registry.
- Evidence: The
mcp.jsonfile specifies the commandnpx -y gitnexus@1.6.12 mcpto fetch and run the gitnexus package.
Audit Metadata