clone-to-temp
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line tools for environment setup and retrieval (
mkdir,git clone,curl/wget). These are used for their intended purpose of creating a scratch directory and fetching remote assets into a controlled, ignored location. - [DATA_EXFILTRATION]: No patterns of sensitive data access or external transmission were detected. The skill focuses on inward data flow (cloning/downloading) for local inspection.
- [REMOTE_CODE_EXECUTION]: While the skill downloads remote content (git repositories, datasets), it includes explicit, multi-layered instructions for the agent to never execute, build, or install anything from the downloaded tree. It explicitly forbids lifecycle hooks, package installation, and script execution.
- [PROMPT_INJECTION]: The skill uses instructional language to define its scope (manual-only workflow). It does not contain bypass markers, role-play instructions, or attempts to override global safety filters.
- [PRIVILEGE_ESCALATION]: The skill does not request or use elevated permissions. It operates within the user's project workspace using standard user-level commands.
Audit Metadata