mastg-assign-ids
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands (
git diff,git ls-files,git mv) via local Bash and Python scripts to identify files requiring ID updates. These commands are executed without a shell environment (shell=False) in the Python scripts, preventing command injection vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill scans file names and contents for placeholder ID patterns. While this processes data that could be influenced by external repository contributors, the skill's operations are limited to static string replacements using a strictly defined regex pattern for MASTG IDs.
- Ingestion points: File names and markdown content processed by
scripts/find_fakes.shandscripts/fix_ids.py. - Boundary markers: None present.
- Capability inventory: Local file system writes, repository renames via
git mv, and execution of bundled scripts. - Sanitization: No specific sanitization; however, the logic is constrained to specific ID pattern matching.
Audit Metadata