working-with-ssf

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and installation guides hosted on the author's GitHub repository. It also suggests using the skills CLI from a well-known organization to manage skill installation.
  • [COMMAND_EXECUTION]: The skill involves running the ssf command-line utility for factory management, diagnostics, and status checks. It includes a specific security instruction to defer sudo commands to the human user unless non-interactive root access is already established.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on GitHub issues and pull requests, which are external data sources that could contain malicious instructions. To mitigate risks, the instructions mandate that the agent must scrub all sensitive information—including tokens, keys, and network identifiers—before filing bug reports and must obtain user permission before making significant configuration changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 11:58 PM