repo-init
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches citation style language (CSL) files from the 'citation-style-language' repository on GitHub, which is a well-known community resource for formatting styles.\n- [COMMAND_EXECUTION]: Executes standard shell commands such as
gitfor repository detection andghfor editing repository descriptions. These actions are appropriate for the tool's intended use case.\n- [PROMPT_INJECTION]: Evaluates the repository for indirect prompt injection surfaces where external data is processed.\n - Ingestion points: Extracts project details and language information from the existing
README.mdand file tree.\n - Boundary markers: None identified; data is interpolated directly into configuration files.\n
- Capability inventory: Capability to write local files and update remote repository settings via the
ghtool.\n - Sanitization: No specific sanitization or validation of the extracted repository content was observed.
Audit Metadata