lov-repo-takeover
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to manage Git repository remotes and history, which is a standard development task. Analysis of the instructions and accompanying scripts identifies no malicious patterns, prompt injections, or unauthorized data exfiltration attempts.
- [DATA_EXPOSURE]: The configuration management script (
scripts/profile_store.py) implements security safeguards to protect user privacy. It includes a deny-list for sensitive field names (such as 'token', 'secret', and 'password'), preventing the persistence of credentials within the shared user profile. - [INDIRECT_PROMPT_INJECTION]: The skill mitigates risks associated with processing external repository data by enforcing strict execution boundaries that separate the analysis and modification phases. It also provides a comprehensive validation utility (
scripts/validate_skill.py) to ensure the skill source remains compliant with safety and structural standards.
Audit Metadata