gitea-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates repository management and Gitea interactions by executing git commands, the tea CLI, and custom shell scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data from backlog files and Gitea API outputs (PR reviews and CI status) which could influence the agent's behavior.
- Ingestion points: Backlog files at 'context-network/backlog/by-status/*.md' and PR/CI metadata fetched via shell scripts.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard embedded commands in these external inputs.
- Capability inventory: The skill possesses the ability to execute git and shell commands, perform network requests via curl, and write to the local file system.
- Sanitization: The workflow lacks evidence of input validation or sanitization for external content before it is processed or used in decision-making logic.
Audit Metadata