checking-upstream-first
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a legitimate software engineering process aimed at reducing code redundancy by checking upstream sources.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to use
curlfor fetching raw file content fromgithub.com/lenneTech. These operations are used exclusively for local comparison using thediffutility and target the vendor's own public repositories. - [COMMAND_EXECUTION]: The instructions utilize common CLI tools such as
ls,grep,npm, andghfor repository inspection. Anode -ecommand is provided to programmatically retrieve package versions from localpackage.jsonfiles, which is a standard development practice. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading external code and metadata from GitHub. This constitutes an ingestion surface; however, the risk is mitigated as the context is restricted to technical comparison and the sources are the vendor's own controlled repositories.
Audit Metadata