work-in-external-repo
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several Git and shell commands to manage repository lifecycles, including
git clone,git fetch,git worktree, andfind. These commands are used to establish isolated working environments and verify repository identity by checking remote origin URLs. - [EXTERNAL_DOWNLOADS]: The documentation references the installation of companion skills using
npx skills add crissmoldovan/agent-skills. This targets resources provided by the same author (crissmoldovan) and is presented as a standard method for extending the agent's capabilities. - [DATA_EXPOSURE]: The skill performs read operations on local Git configurations and directory structures to verify that target repositories match the user's request. This verification step is a safety measure designed to prevent unintended modifications to incorrect forks or local clones.
Audit Metadata