adopt-repository-standards
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
@lutzseverino/repo-standardstool via a shell command when adopting repository conventions. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@lutzseverino/repo-standardspackage and references a default repository athttps://github.com/lutzseverino/repo-canon. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The
<source>parameter is supplied by the user and interpolated into thenpxcommand (SKILL.md). - Boundary markers: None present; the command template lacks delimiters or instructions to ignore embedded commands in the user-supplied source string.
- Capability inventory: Execution of shell commands through the
npxutility (SKILL.md). - Sanitization: No evidence of input validation or sanitization is present in the skill's instructions to prevent command injection via the
<source>argument.
Audit Metadata