run-ribosome-codegen
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions external scripts for the Ribosome tool hosted on GitHub (
github.com/sustrik/ribosome). These are references to a well-known open-source project and do not include any automatic execution or installation logic that would escalate the verdict. - [COMMAND_EXECUTION]: The instructions describe how to execute Ribosome via shell commands (e.g.,
ribosome.js generator.js.dna). The skill includes explicit safety warnings regarding shell injection, quoting, and handling untrusted data, which aligns with security best practices. - [DATA_EXFILTRATION]: No patterns of data exfiltration were found. The skill focuses on local code generation workflows, involving reading local input files and writing to local output files or standard output.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override agent safety guidelines or bypass platform restrictions. It maintains a consistent focus on its stated purpose of running code generators.
Audit Metadata