project-references
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts and standard CLI tools including
git,gh(GitHub CLI),find, andgrepto manage local repository mirrors and perform targeted searches for implementation patterns. - [EXTERNAL_DOWNLOADS]: The skill downloads source code from GitHub repositories using
git cloneandgh repo clone. These downloads target repositories specified by the user or found in the user's GitHub account to serve as architectural references. - [INDIRECT_PROMPT_INJECTION]: As the skill involves reading and processing external code and configuration files, there is a potential for indirect prompt injection if those files contain malicious instructions. The skill includes specific safety instructions to cite sources and avoid exposing sensitive files like
.envto mitigate risks associated with processing untrusted data.
Audit Metadata