jb-skill-prefs
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves configuration data and installation workflows from the author's own GitHub Gist (gist.github.com/bjesuiter). These resources are central to the skill's documented purpose of managing a shared registry.
- [COMMAND_EXECUTION]: Utilizes the
ghcommand-line tool for Gist synchronization (view, list, create, edit) andnpxto run thejson5utility for data validation. These operations are consistent with the skill's role as a registry editor. - [PROMPT_INJECTION]: The skill ingests remote instructions from a Gist file (
jb-skill-preferences-setup.md) which guide the agent during installation tasks. - Ingestion points: Data is read via the
gh gist viewcommand as described in the installation and reading sections ofSKILL.md. - Boundary markers: Remote content is not wrapped in explicit delimiters or ignore-instructions warnings.
- Capability inventory: The skill can perform shell operations through the
ghCLI and execute npm packages vianpx. - Sanitization: The skill validates the registry's JSON5 syntax but does not perform sanitization of the natural language instructions found in the setup workflow document.
Audit Metadata