adopt-standards
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/select-releasescript fetches release information and source code from the author's GitHub repository. It resolves the latest version fromhttps://github.com/lutzseverino/repository-standards/releases/latestand clones the repository fromhttps://github.com/lutzseverino/repository-standards.gitusinggit clone. - [COMMAND_EXECUTION]: The skill uses shell commands to manage and verify the downloaded repository. It executes
git cloneto fetch the specific release branch,git describe --tags --exact-match HEADto verify the checkout matches the expected version tag, andgit status --porcelain=v1to ensure the downloaded checkout is clean and unmodified. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a bootstrap that instructs the agent to ingest and follow new instructions from the downloaded release.
- Ingestion points: The agent is directed to read the
SKILL.mdfile found within the downloaded checkout at.agents/skills/adopt-standards/SKILL.md. - Boundary markers: Absent; the skill relies on the integrity of the source repository and version pinning.
- Capability inventory: The agent is instructed to "Read and follow" the new skill and invoke its adapter with specific environment variables (
REPOSITORY_STANDARDS_CHECKOUT). - Sanitization: The bootstrap script performs extensive validation, including checking that the checkout is clean, verifying the Git tag matches the requested version, and ensuring an internal
VERSIONfile matches the expected metadata.
Audit Metadata