repo-align
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill manages repository configurations by executing shell commands. It utilizes a custom CLI tool named 'kscripts' along with standard utilities such as 'dart', 'gh', and 'npx' to perform audits, formatting, and remote GitHub settings updates.
- [DYNAMIC_EXECUTION]: The skill includes steps to compile local source code into a binary via 'dart install'. This process targets the file '~/github/kevmoo/scripts.dart' to build the 'kscripts' executable.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes local repository configuration files, which presents a surface for indirect instructions.
- Ingestion points: Local configuration files including 'analysis_options.yaml' and GitHub workflow templates.
- Boundary markers: Not explicitly defined in the instructions.
- Capability inventory: Capability to execute shell commands and modify local files through the 'kscripts' and 'dart' tools.
- Sanitization: No explicit sanitization or validation of the ingested file content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill fetches the 'prettier' package from the npm registry using the 'npx' command for code formatting tasks.
Audit Metadata