setup-argo-skills

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches configuration templates from the author's official GitHub repository.
  • Evidence: Downloads rtk-filters.toml, rtk-filters.swift.toml, and rtk-filters.bun.toml from https://raw.githubusercontent.com/milad-alizadeh/argo/main/packages/argo-skills/assets using curl.
  • [COMMAND_EXECUTION]: Utilizes various system and CLI tools to manage the project environment.
  • Evidence: Invokes git, npx, gh, jq, and curl to install skills, update configurations, and inspect the repository state.
  • [INDIRECT_PROMPT_INJECTION]: Resolves documentation templates using data gathered from the local environment, which could be influenced by untrusted sources in the project.
  • Ingestion points: Reads the project's file list via git ls-files and fetches issue tracker labels using gh label list.
  • Boundary markers: The templates do not employ specific delimiters or "ignore embedded instructions" warnings when interpolating project data into the final documentation.
  • Capability inventory: The skill is capable of shell command execution, file system modification, and provides explicit instructions for browser-based automation via a javascript_tool in its templates.
  • Sanitization: There is no evidence of sanitization or validation of the ingested labels or file names before they are resolved into the documentation templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 12:27 PM