piu-backend-sync
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones remote git repositories based on user-supplied URLs for analysis purposes.- [COMMAND_EXECUTION]: Shell commands including git, bun, mktemp, and rm are used to manage repository data and execute the skill's internal automation scripts.- [PROMPT_INJECTION]: The skill parses untrusted source code from external repositories to extract API routes and data schemas, which presents a surface for indirect prompt injection. (Ingestion points: git clone and source file parsing in Step 1, 2, and 4; Boundary markers: Absent; Capability inventory: git, bun, mktemp, rm; Sanitization: Not specified).
Audit Metadata