setup-repo
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository metadata and existing file structures (such as Git remotes,
AGENTS.md, andGLOSSARY.md) to generate configuration drafts. While this creates a surface for processing untrusted data, the process requires a mandatory human-in-the-loop confirmation step where the user reviews a combined draft before any files are written to the disk. - [COMMAND_EXECUTION]: The skill executes standard version control commands (
git remote -v) to identify the project's remote origin. This is a routine operation for repository identification and does not involve passing unvalidated user input to the shell.
Audit Metadata