ingest-context-skills
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill acquires its runtime environment and importer logic from the vendor's official GitHub repositories.
- Evidence: The launcher script references
https://github.com/getcolors/context-sql.gitandhttps://github.com/getcolors/blue.git. - [COMMAND_EXECUTION]: The skill uses a bash wrapper to execute the
uvpackage manager and Python code to perform database and Git operations. - Evidence: The
context-skillsscript usesuv runto execute thepackage_context_sql_blue.ingestmodule. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing external data by ingesting other agent skills from remote repositories.
- Ingestion points: Upstream skill repositories (e.g.,
getcolors/skills) imported via theingestcommand as described inSKILL.md. - Boundary markers: The documentation explicitly states that selection does not certify the source follows standards and mandates that scripts in imported payloads must not be executed.
- Capability inventory: The skill performs database writes to PostgreSQL, reads/writes local configuration files in
~/.config/context-sql/, and interacts with the Git CLI. - Sanitization: The importer implements a verification process that independently compares every selected path and byte with the source Git repository to detect unauthorized modifications.
Audit Metadata