sglang-model-day0-support
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/collect_public_pr_evidence.pyusessubprocess.runto call the GitHub CLI (gh api). The tool implements robust input validation using strict regular expressions and a repository allowlist (defaulting tosgl-project/sglang) to ensure that only legitimate public pull request metadata is fetched, preventing arbitrary command injection. - [DATA_EXPOSURE]: The skill includes a dedicated security tool,
scripts/validate_day0_bundle.py, which is designed to scan project artifacts for sensitive information. It proactively checks for hardcoded secrets (GitHub tokens, AWS keys), absolute private file paths, and internal IP addresses to ensure they are not included in public release bundles. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (GitHub PR metadata), it incorporates significant mitigations. The instructions explicitly prohibit the automated generation of technical conclusions or summaries from this data, mandating manual human review of all implementation details and evidence before publication.
- [SAFE]: The workflow follows industry-standard 'Clean-Room' publication policies, as documented in
references/sanitization.md, focusing on the safe transition of development work to public repositories without leaking infrastructure or organizational metadata.
Audit Metadata