skills/l-yifan/skills/skill-backup/Gen Agent Trust Hub

skill-backup

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions direct the agent to perform various repository management and file system operations to maintain the skills index.
  • Evidence:
  • Execution of Git commands including git clone, git status, git diff, and git push to synchronize changes with a remote repository (e.g., L-yifan/skills).
  • File system operations such as directory copying and path resolution to manage skill sources.
  • Automated deletion of temporary clone directories and intermediate source copies following successful synchronization, with built-in path verification to ensure safety.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external, third-party skills to update its README index, creating a surface for potential injection.
  • Ingestion points: The skill reads SKILL.md files and official installation instructions from external GitHub repositories or marketplace links (Step 2A).
  • Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the imported external text.
  • Capability inventory: The skill possesses file-write capabilities (updating the README and syncing directories) and network access (git push).
  • Sanitization: The instructions focus on formatting consistency within the README tables but do not explicitly describe filtering or sanitization of the external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 12:00 PM