sync-provider

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several local scripts and command-line tools as part of its workflow, including scripts/check-provider-commit.sh, scripts/git-diff.ts, and the gh (GitHub) CLI. It also invokes package manager commands like pnpm test, pnpm run lint, and pnpm run typecheck on the synced providers.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions designed to influence the agent's behavior during the analysis and refactoring phases.
  • Ingestion points: The agent is instructed to read and analyze git diff content stored in .diffs/<commit_hash>/ which originates from external GitHub repositories.
  • Boundary markers: No explicit boundary markers or instructions to disregard embedded commands in the diff content are present.
  • Capability inventory: The agent has the capability to write to the file system (applying changes) and execute shell commands (pnpm test, pnpm run lint).
  • Sanitization: No sanitization or validation of the ingested diff content is performed before the agent processes it for planning.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 07:00 PM