sync-template
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches template source and metadata from the blogic-cz/blogic-template-ts repository on GitHub using the git and gh CLI tools to establish a synchronization baseline.
- [COMMAND_EXECUTION]: Executes shell commands via bun, git, and gh to perform repository diffing, run code quality checks (bun run check), and execute project tests (bun run test).
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources including upstream template files, PR metadata, and release notes during the discovery phase. Risks are mitigated by a mandatory Phase 3 triage step where a human-readable plan is generated in .sisyphus/plans/ and explicit user approval is required before any modifications are applied. The substitution matrix defined in references/substitution-rules.md acts as a sanitization layer for incoming template content.
Audit Metadata