setup-leandrocfe-skills
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a scaffolding tool for repository management. It leverages standard authenticated CLI tools like
gh(GitHub) andglab(GitLab) to manage issues and pull requests. - [COMMAND_EXECUTION]: The skill uses commands such as
git remote -vand.git/configto identify the project's hosting environment. These are standard operations for development tools to understand their execution context. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from existing repository files to maintain configuration state.
- Ingestion points: The skill reads
.git/config,AGENTS.md,CLAUDE.md, andCONTEXT.mdto detect existing settings. - Boundary markers: None present for the file read operations.
- Capability inventory: The skill has the ability to write configuration files to
docs/agents/and modify agent instruction files (CLAUDE.md/AGENTS.md). It also provides instructions for managing issues via GitHub/GitLab APIs. - Sanitization: No specific sanitization of the file contents is performed before processing, but the skill is designed for idempotent setup rather than processing untrusted external data.
Audit Metadata