show-my-repo
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external repositories, which creates a surface for indirect prompt injection.\n
- Ingestion points: The skill instructs the agent to read repository documentation (README, user-facing docs) and validate claims by analyzing source code, core modules, and configuration files as defined in the 'Workflow' section of SKILL.md.\n
- Boundary markers: The instructions lack explicit boundary markers or directions to ignore instructions that might be embedded within the repository files being analyzed.\n
- Capability inventory: The skill utilizes file read capabilities and creates a structured report on the local file system within the 'show-my-repo/' directory. No network or system-level execution capabilities are invoked on the ingested data.\n
- Sanitization: No sanitization or filtering logic is specified for the data retrieved from the repository files before it is summarized into the presentation pack.
Audit Metadata