supply-chain-attack-recon
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation includes references to historical supply chain attacks, specifically the Codecov incident involving the piping of a remote script to a shell. These references, along with shell commands designed to search for such patterns in target workflows, are used for educational and auditing purposes and do not represent a threat to the user environment.
- [EXTERNAL_DOWNLOADS]: The instructions suggest the installation of 'zizmor', an open-source security tool for GitHub Actions, using the standard cargo package manager. This is a common practice for security professionals and uses a reputable source.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of untrusted data from external sources, including JavaScript bundles, package manifests, and repository contents. While this constitutes an attack surface, the provided scripts primarily utilize robust parsing and filtering tools like jq and grep to extract specific information, minimizing the risk of accidental instruction execution.
- [DYNAMIC_EXECUTION]: A Python script is utilized to programmatically generate string candidates for typosquatting checks. This use of dynamic execution is confined to generating specific string patterns for reconnaissance and does not involve executing external or untrusted code.
Audit Metadata