oss-analyze

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches repository data from GitHub using git, the GitHub CLI, and curl. These operations target well-known services and are core to the skill's primary function.
  • [COMMAND_EXECUTION]: Standard development tools including git clone and gh repo clone are used to acquire project source code for analysis.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes untrusted data from external repositories.
  • Ingestion points: Data is read from external files via git, gh, and curl operations described in the workflow.
  • Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed project files.
  • Capability inventory: The agent has the ability to execute shell commands (git, gh, curl) and perform filesystem writes to the knowledge/ directory.
  • Sanitization: No explicit validation or filtering of ingested file content is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 10:58 PM
Security Audit — agent-trust-hub — oss-analyze