setup-argo-skills
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration templates from the author's official GitHub repository.
- Evidence: Downloads
rtk-filters.toml,rtk-filters.swift.toml, andrtk-filters.bun.tomlfromhttps://raw.githubusercontent.com/milad-alizadeh/argo/main/packages/argo-skills/assetsusingcurl. - [COMMAND_EXECUTION]: Utilizes various system and CLI tools to manage the project environment.
- Evidence: Invokes
git,npx,gh,jq, andcurlto install skills, update configurations, and inspect the repository state. - [INDIRECT_PROMPT_INJECTION]: Resolves documentation templates using data gathered from the local environment, which could be influenced by untrusted sources in the project.
- Ingestion points: Reads the project's file list via
git ls-filesand fetches issue tracker labels usinggh label list. - Boundary markers: The templates do not employ specific delimiters or "ignore embedded instructions" warnings when interpolating project data into the final documentation.
- Capability inventory: The skill is capable of shell command execution, file system modification, and provides explicit instructions for browser-based automation via a
javascript_toolin its templates. - Sanitization: There is no evidence of sanitization or validation of the ingested labels or file names before they are resolved into the documentation templates.
Audit Metadata