my-skills-freshness
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted data by reading GitHub issue bodies via the
gh issue listcommand. It proactively mitigates this risk by instructing the agent to 're-derive, never trust the issue body as ground truth' and instead verify the status using a fresh execution of the localvendor-sync.mjsscript. - [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) and Node.js to perform repository maintenance tasks. These commands are executed locally, do not involve remote code downloads, and are limited to the intended scope of checking and closing repository issues.
Audit Metadata