start-cloud
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands for file management and utilizes the GitHub CLI tool for managing infrastructure workflows. These operations are handled within the context of local environment setup and monitoring.\n- [DYNAMIC_EXECUTION]: Local Python scripts are generated to process configuration data and generate reports. These scripts use standard library modules and enforce secure file permissions (
0o600) for sensitive output files, which is a security best practice.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data which could potentially lead to injection if not handled correctly.\n - Ingestion points: Configuration parameters like
REPO_NAMEandTELEGRAM_USER_IDcollected inSKILL.md.\n - Boundary markers: No explicit delimiters are used to wrap user-provided configuration strings.\n
- Capability inventory: The skill uses shell commands and local script generation in
SKILL.mdto perform its tasks.\n - Sanitization: The skill performs regex validation on the
REPO_NAME(^[a-zA-Z0-9_][a-zA-Z0-9._-]*$) and basic numeric validation for IDs, effectively mitigating simple command injection attempts.
Audit Metadata