gigio-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git statusandgit login Step 4 to audit the commitment status and history of project files. These commands are standard for repository management and are used appropriately for auditing. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from repository files to inform the project setup process.
- Ingestion points: Reads
README,docs, andgit logduring the inspection step. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the ingested content.
- Capability inventory: The skill's capabilities are limited to writing local documentation and configuration files (
PROJECT.md,AGENTS.md,CLAUDE.md). - Sanitization: No explicit sanitization is performed on the ingested repository data.
- Note: This injection surface is a functional requirement for the skill's primary purpose of repository analysis and setup, and the risk is minimal given the lack of dangerous execution capabilities.
Audit Metadata