darkmatter-repo-setup
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs numerous shell commands to facilitate repository setup, including
git clonefor template retrieval,bun installfor dependency management, and various validation checks such asbun run testandnix flake check. - [EXTERNAL_DOWNLOADS]: Fetches organization templates from GitHub and installs the
effect-solutionsCLI tool from a public package registry. These resources are maintained by the skill author. - [REMOTE_CODE_EXECUTION]: Executes an installation script directly from the author's GitHub repository using
nix run github:darkmatter/skills#installto set up standardized agent documentation. - [DYNAMIC_EXECUTION]: The skill installs and immediately utilizes the
effect-solutionsCLI to retrieve best-practice configurations at runtime, ensuring the setup follows current organizational standards. - [PERSISTENCE]: Modifies repository configuration files and CI/CD workflow definitions (e.g.,
.github/workflows/ci.yaml) to ensure standardized tooling and validation steps persist across the development lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the target repository, including
package.jsonandflake.nix, to perform compliance audits. It mitigates potential injection risks by using explicit adaptation rules and documentation boundary markers (<!-- BEGIN ... -->) rather than performing direct content mirroring.
Audit Metadata