sync-sites
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate administrative utility for OSTree federation. Analysis of the Bash scripts confirms that all user-supplied inputs, such as commit hashes and file paths, are handled securely using array-based execution and proper variable quoting. This prevents shell injection vulnerabilities. No patterns related to prompt injection, data exfiltration, or unauthorized persistence were identified. The use of system tools like rpm-ostree is consistent with the skill's stated purpose.
Audit Metadata