scaffold-github-cloud-agent-environment
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes internal bash and python scripts to audit the repository. These operations use subprocess.run with argument lists to prevent shell injection.
- [DATA_EXFILTRATION]: The audit identifies sensitive configuration files like .npmrc to prompt for manual secret configuration, but does not read or transmit their contents.
- [PROMPT_INJECTION]: The skill ingests untrusted data from project files (ingestion points: package.json, Makefile) to generate workflows. It mitigates potential indirect prompt injection risks via sanitization (sanitization: YAML quoting in copilot_env_lib.py) before writing to the filesystem (capabilities: file-write).
Audit Metadata