git-repo-manager
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
git cloneandgit pullto download content from remote repositories to a local directory (temp/repo-cache/). - [COMMAND_EXECUTION]: The skill executes shell commands including
rm -rf,test -d, andcdto manage the repository cache on the local filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill downloads untrusted data from external Git repositories into the agent's environment, creating a vulnerability surface. * Ingestion points: The
git clone <repo-url>command inSKILL.mdingests untrusted data from external sources. * Boundary markers: No delimiters or warnings are specified to prevent the agent from obeying instructions embedded in the downloaded repositories. * Capability inventory: The skill possesses filesystem deletion (rm -rf) and network download (git) capabilities. * Sanitization: No sanitization or validation of the repository content is performed by this skill.
Audit Metadata