project-references

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts and standard CLI tools including git, gh (GitHub CLI), find, and grep to manage local repository mirrors and perform targeted searches for implementation patterns.
  • [EXTERNAL_DOWNLOADS]: The skill downloads source code from GitHub repositories using git clone and gh repo clone. These downloads target repositories specified by the user or found in the user's GitHub account to serve as architectural references.
  • [INDIRECT_PROMPT_INJECTION]: As the skill involves reading and processing external code and configuration files, there is a potential for indirect prompt injection if those files contain malicious instructions. The skill includes specific safety instructions to cite sources and avoid exposing sensitive files like .env to mitigate risks associated with processing untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:37 AM