project-setup
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gh(GitHub CLI) tool to perform repository management tasks, such as creating repositories, updating settings via API calls, and configuring branch protection rules. These operations are essential to the skill's primary function of automated project setup. - [EXTERNAL_DOWNLOADS]: The
release-please-config.jsontemplate references a JSON schema from the official Google Cloud GitHub repository (googleapis/release-please) to provide configuration validation. This is a standard practice for therelease-pleaseautomation tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository names and descriptions provided by the user (found in
SKILL.md). - Ingestion points: User-provided
<repo-name>and<short description>. - Boundary markers: Absent.
- Capability inventory: Execution of
ghCLI commands and file creation/writes. - Sanitization: Absent.
- While this interpolation creates an attack surface, it is necessary for the skill's primary function.
Audit Metadata