sync-upstream-gateway
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches source code and configuration from the official LobeHub-biz and LobeHub GitHub repositories using
git clone. These are well-known repositories associated with the skill's stated purpose and author. - [COMMAND_EXECUTION]: Provides instructions to execute standard Go development tools, specifically
go buildandgo test, to verify the synchronized implementation. These commands are localized to the project workspace. - [DATA_EXFILTRATION]: No patterns of sensitive data collection or external exfiltration were detected. The network operations are limited to cloning public source code repositories.
- [PROMPT_INJECTION]: The skill does not contain instructions attempting to bypass safety filters or override agent behavior. The instructions are focused on technical synchronization tasks.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes information from external README files and source code to determine protocol changes, the ingestion targets the project's own trusted upstream repositories, minimizing the risk of adversarial content influencing the agent.
Audit Metadata