laststance-publish-skill
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill facilitates legitimate repository management and publishing workflows for agent skills. It targets the author's own repository infrastructure for distribution.
- [COMMAND_EXECUTION]: Employs standard shell utilities such as
cp,diff,git, andnpxto manage skill files and synchronize them with a remote Git repository. - [INDIRECT_PROMPT_INJECTION]: As a publishing tool, the skill ingests content from local directories. It includes explicit instructions for the agent to review file differences and manually sanitize any secrets or project-specific data before committing to the public repository.
- [DATA_EXFILTRATION]: Performs network operations through
git pushto upload skill updates to thelaststance/skillsrepository. This behavior is consistent with the skill's primary purpose and targets established vendor resources.
Audit Metadata