arkweb-preflight
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill checks for the presence of authentication tokens by reading environment variables (GITCODE_TOKEN, GITLAB_TOKEN) and accessing local .env files.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests using curl to the gitcode.com API to verify repository availability and metadata.
- [COMMAND_EXECUTION]: The skill executes shell commands such as mkdir and rm to test filesystem write permissions and creates template configuration files for environment setup.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests data from external API responses and local configuration files.
- Ingestion points: Reads from .env files and API response metadata from gitcode.com.
- Boundary markers: None explicitly defined in the logic.
- Capability inventory: Includes filesystem operations (mkdir, rm), network access (curl), and the ability to generate new local files.
- Sanitization: The skill does not explicitly describe sanitization for the data retrieved from external API endpoints or local environment files.
Audit Metadata