workflow-environment-ready
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard toolchain verification and dependency installation commands such as
node -v,npm install,pnpm install, andpip install. These are routine operations for setting up a software development environment. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection as it parses repository files to identify and execute project-specific scripts.
- Ingestion points: Configuration and documentation files including
package.json,Makefile,justfile,README, and.env.example. - Boundary markers: None are defined for the repository content, but the skill includes a strong override to prevent the output of sensitive data.
- Capability inventory: Execution of scripts defined in the codebase, dependency management, and network reachability checks for local services.
- Sanitization: The skill does not specify sanitization for the names of scripts or environment variables read from the repository.
- [SAFE]: The skill contains explicit safety guardrails regarding data privacy. It specifically commands the agent to read environment configuration files only for the purpose of checking variable existence and forbids the printing, logging, or transmission of actual secret values.
Audit Metadata