optimization-sdk-sync
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to clone the official Contentful Optimization repository from GitHub (https://github.com/contentful/optimization.git) to retrieve the latest SDK documentation, types, and implementation examples.
- [REMOTE_CODE_EXECUTION]: During the synchronization process, the skill executes lifecycle scripts from the cloned repository using
pnpm knowledge:checkandpnpm guides:check. This execution of remote code is performed on the vendor's official codebase. - [COMMAND_EXECUTION]: The skill uses several shell commands for its operations, including
pnpmfor building and testing, andpython3for running local validation scripts such asquick_validate.py. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from an external repository to compile reference guides, creating an attack surface for indirect prompt injection.
- Ingestion points: Documentation files under
documentation/internal/sdk-knowledge/anddocumentation/authoring/blueprints/, public exports/types, andAGENTS.mdpolicy files from the upstream repository. - Boundary markers: The skill instructs the agent to follow rules defined in upstream
AGENTS.mdfiles, but lacks explicit technical delimiters or escaping for the content being processed. - Capability inventory: The agent has the ability to execute shell commands (
pnpm,python3,npx), read/write local files, and access the network via Git. - Sanitization: There is no mention of sanitizing or validating the text content of the ingested documentation before it is incorporated into the generated references.
Audit Metadata