sentinel-sync
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a
sentinelCLI tool to perform actions such assync pull,scrub,sync push, andrun finish. These are standard operational commands for the described workflow. - [DATA_EXFILTRATION]: While the skill's purpose is to share data externally, it implements several safeguards: it mandates a secret scrubbing process (
sentinel scrub), requires a check for remaining secrets, and demands explicit user approval after showing exactly what will be published viagit status. - [CREDENTIALS_UNSAFE]: The skill mentions the requirement of a token with workflow permissions for CI setup, but it does not attempt to harvest, hardcode, or store these credentials unsafely; it simply notes the necessity of the permission for the task.
Audit Metadata