checking-upstream-first

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a legitimate software engineering process aimed at reducing code redundancy by checking upstream sources.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to use curl for fetching raw file content from github.com/lenneTech. These operations are used exclusively for local comparison using the diff utility and target the vendor's own public repositories.
  • [COMMAND_EXECUTION]: The instructions utilize common CLI tools such as ls, grep, npm, and gh for repository inspection. A node -e command is provided to programmatically retrieve package versions from local package.json files, which is a standard development practice.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves reading external code and metadata from GitHub. This constitutes an ingestion surface; however, the risk is mitigated as the context is restricted to technical comparison and the sources are the vendor's own controlled repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:12 AM