cross-repo-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/list_azdo_repos.pyutilizessubprocess.runto interact with external tools required for its functionality. - It executes
az(Azure CLI) commands to list projects, fetch descriptions, and list repositories within an Azure DevOps organization. - It executes
git remote get-url originto identify the origin of local directories and map them to remote repositories. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository names and project descriptions fetched from Azure DevOps, which are then written to the
ALL_REPOS.mdfile for agent consumption. - Ingestion points: Data is ingested in
scripts/list_azdo_repos.pyvialist_projects,project_description, andlist_reposfunctions. - Boundary markers: The output is structured as a Markdown table in
ALL_REPOS.md, but lacks specific instructions for the agent to ignore potentially malicious content embedded in the descriptions. - Capability inventory: The skill performs filesystem reads via
os.walk, file writes toALL_REPOS.md, and system command execution viasubprocess.run. - Sanitization: The script does not sanitize or filter the content of project/repository descriptions for natural language instructions before writing them to the summary file.
Audit Metadata