repo-standard
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local auditing script (
scripts/audit.sh) to verify project settings. The script utilizes standard system tools likegrep,find, andjqfor file inspection. - [SAFE]: The skill checks for project registration in local developer tool configurations, such as
obsidian.jsonandafk.json. These operations are performed locally and do not involve credential theft or data exfiltration. - [SAFE]: Evaluation of the indirect prompt injection surface:
- Ingestion points: Project documentation and configuration files (e.g.,
AGENTS.md,package.json) and local developer environment configs. - Boundary markers: Audit results are structured into a deterministic markdown table.
- Capability inventory: Limited to read-only operations and pattern matching using shell utilities.
- Sanitization: Uses deterministic tools (
grep,jq) for verification, ensuring that project content is treated as data rather than instructions.
Audit Metadata