start-cloud

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands for file management and utilizes the GitHub CLI tool for managing infrastructure workflows. These operations are handled within the context of local environment setup and monitoring.\n- [DYNAMIC_EXECUTION]: Local Python scripts are generated to process configuration data and generate reports. These scripts use standard library modules and enforce secure file permissions (0o600) for sensitive output files, which is a security best practice.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data which could potentially lead to injection if not handled correctly.\n
  • Ingestion points: Configuration parameters like REPO_NAME and TELEGRAM_USER_ID collected in SKILL.md.\n
  • Boundary markers: No explicit delimiters are used to wrap user-provided configuration strings.\n
  • Capability inventory: The skill uses shell commands and local script generation in SKILL.md to perform its tasks.\n
  • Sanitization: The skill performs regex validation on the REPO_NAME (^[a-zA-Z0-9_][a-zA-Z0-9._-]*$) and basic numeric validation for IDs, effectively mitigating simple command injection attempts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:37 AM
Security Audit — agent-trust-hub — start-cloud