oss-analyze
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches repository data from GitHub using git, the GitHub CLI, and curl. These operations target well-known services and are core to the skill's primary function.
- [COMMAND_EXECUTION]: Standard development tools including
git cloneandgh repo cloneare used to acquire project source code for analysis. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes untrusted data from external repositories.
- Ingestion points: Data is read from external files via git, gh, and curl operations described in the workflow.
- Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed project files.
- Capability inventory: The agent has the ability to execute shell commands (git, gh, curl) and perform filesystem writes to the knowledge/ directory.
- Sanitization: No explicit validation or filtering of ingested file content is performed.
Audit Metadata