skills/davidondrej/skills/repo-sync/Gen Agent Trust Hub

repo-sync

Warn

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the user to install the repo-sync tool using Homebrew from a third-party tap (vectal-labs/tap/repo-sync) and references its source code on GitHub (github.com/vectal-labs/repo-sync).\n- [PERSISTENCE]: The skill configures a macOS LaunchAgent (~/Library/LaunchAgents/com.vectal-labs.repo-sync.plist) to ensure the synchronization daemon runs continuously and starts automatically upon user login.\n- [COMMAND_EXECUTION]: The skill utilizes several system-level commands, including brew for installation, launchctl for service lifecycle management, and plutil for extracting configuration data from property lists.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages repositories that provide "team context" and "agent skills." Content within these repositories could potentially contain instructions intended to influence the behavior of an AI agent that processes the synced data.\n
  • Ingestion points: Shared Git repositories providing team documents, notes, and agent skills (SKILL.md).\n
  • Boundary markers: The instructions do not specify any delimiters or warnings to isolate the agent from potentially malicious instructions within the synced data.\n
  • Capability inventory: The skill possesses the ability to execute shell commands (brew, launchctl, repo-sync) and modify the local file system (repo-sync skill install).\n
  • Sanitization: There is no mention of sanitizing or filtering the content retrieved from remote repositories before it is processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 13, 2026, 03:05 PM