sync-provider
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local scripts and command-line tools as part of its workflow, including
scripts/check-provider-commit.sh,scripts/git-diff.ts, and thegh(GitHub) CLI. It also invokes package manager commands likepnpm test,pnpm run lint, andpnpm run typecheckon the synced providers. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions designed to influence the agent's behavior during the analysis and refactoring phases.
- Ingestion points: The agent is instructed to read and analyze git diff content stored in
.diffs/<commit_hash>/which originates from external GitHub repositories. - Boundary markers: No explicit boundary markers or instructions to disregard embedded commands in the diff content are present.
- Capability inventory: The agent has the capability to write to the file system (applying changes) and execute shell commands (
pnpm test,pnpm run lint). - Sanitization: No sanitization or validation of the ingested diff content is performed before the agent processes it for planning.
Audit Metadata