sync-upstream
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git command-line operations (such as
git fetch,git diff,git commit, andgit push) to manage repository updates and versioning.- [EXTERNAL_DOWNLOADS]: The skill retrieves updates and configuration data from a well-known repository on GitHub (mattpocock/skills). These operations follow standard development practices for maintaining forked projects.- [PROMPT_INJECTION]: The skill is designed to ingest and process external data, specifically changelogs and code differences from the upstream repository. This creates a surface for indirect prompt injection where instructions could be hidden in the upstream data. However, the skill explicitly mitigates this risk by requiring a mandatory human review and approval phase before any suggested adaptations are executed.
Audit Metadata