setup-krit-skills
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard command-line tools
gh(GitHub CLI) andglab(GitLab CLI) to verify authentication status and list repository labels. These commands are used as intended for project setup and environment verification. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading repository labels via CLI tools and incorporating them into a local
CONTEXT.mdfile. - Ingestion points: Output from
gh label list --repo <owner/repo>inSKILL.md. - Boundary markers: None present.
- Capability inventory: Directory creation (
mkdir) and local file writing (CONTEXT.md). - Sanitization: No explicit sanitization of the label names is performed before writing to the markdown file, though the impact is limited to local project configuration.
Audit Metadata