klimkit-implement
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing untrusted data from repository files and user requests while possessing capabilities to modify the repository and execute commands.
- Ingestion points: SKILL.md (Step 1) specifies reading user requests, repo instructions, and documentation.
- Boundary markers: Absent. No explicit delimiters or instructions to ignore embedded commands are present in the workflow.
- Capability inventory: The workflow involves executing
npx skillsand performing repository modifications such as creating GitHub releases. - Sanitization: Absent. There is no mention of input validation or escaping for data retrieved during the intake phase.
- [COMMAND_EXECUTION]: The skill uses shell commands to manage libraries and repository releases.
- Evidence: SKILL.md instructs the agent to use
npx skillsfor package management and to perform GitHub release updates for commits on the main branch.
Audit Metadata