update-stars
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities detected. The skill's behavior matches its described purpose of maintaining public-facing statistics for a repository.
- [COMMAND_EXECUTION]: The skill instructs the agent to update local files and perform git operations (commit and push to main). This is a standard workflow for the intended task and does not involve arbitrary or unsafe command execution.
- [SAFE]: Regarding Indirect Prompt Injection (Category 8):
- Ingestion points: Public GitHub star count for the 'Remotion' repository.
- Boundary markers: None explicitly defined for the external data.
- Capability inventory: File write access to TSX components and git push capabilities (SKILL.md).
- Sanitization: The instruction to 'Always round down to the closest 1000' acts as a robust validation step, effectively sanitizing the input by forcing it into a numeric, rounded format and preventing the injection of arbitrary strings into the code.
Audit Metadata