adr-setup
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate repository maintenance tasks, including directory creation and file copying from its local assets to the target repository.
- [COMMAND_EXECUTION]: Uses the standard system
datecommand and file-searching utilities likegrepto manage timestamps and detect existing ADR setups. These operations are scoped to the local repository environment. - [INDIRECT_PROMPT_INJECTION]: The skill installs a documentation system intended to guide future agent behavior based on accepted architectural decisions. While this creates a persistent context for the agent, it is the primary stated purpose of the skill and does not involve processing untrusted external data.
- [SAFE]: No evidence of data exfiltration, hardcoded credentials, remote code execution, or obfuscation was found during the analysis.
Audit Metadata