alterlab-link-health
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, such as URL response headers and CI log files, to determine the necessary link repair actions.
- Ingestion points:
playbooks/full-audit.mdextracts data from GitHub Action logs (audit/baseline.log) viagh run view.references/tier3-substitution.mdprobes external URLs usingcurland thegh api. - Boundary markers: Absent. The instructions do not define explicit delimiters to separate external data from the agent's logic.
- Capability inventory: The skill possesses extensive capabilities including
Bash(forgit,gh,sed,curl),Write, andEditpermissions. - Sanitization: Absent. The skill lacks a formal sanitization or validation layer for the external content before processing it for file modifications.
- [COMMAND_EXECUTION]: The skill uses shell commands to automate repository management and link auditing tasks.
- Evidence:
playbooks/full-audit.mdperformsgh repo cloneandgh run view.references/tier2-intra-repo.mdandreferences/tier3-substitution.mdusesedto modify repository files at scale. - [EXTERNAL_DOWNLOADS]: The skill fetches repository content and verifies external links via network requests.
- Evidence:
playbooks/full-audit.mdclones GitHub repositories.references/tier3-substitution.mdusescurlandgh apito verify the existence and status of external resources.
Audit Metadata