megalinter-setup
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill utilizes
npx mega-linter-runnerandnpx skillsto download and execute code from the npm registry and GitHub. These tools are provided by the official project vendor.- [INDIRECT_PROMPT_INJECTION]: The skill and its sub-agents process data from external, potentially untrusted sources like CI logs and linter results. - Ingestion points: CI log streams (via
gh,glab, etc.) and linter output files. - Boundary markers: Agents are instructed to return compact, structured JSON instead of raw logs.
- Capability inventory: The skill has access to
Bash,Edit, andWebFetchtools. - Sanitization: The process involves structured parsing, though specific sanitization of log contents is not detailed.- [COMMAND_EXECUTION]: Shell commands are used to analyze repositories, manage dependencies, and interact with git providers.- [EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas and documentation from the vendor's GitHub repository and official website.
Audit Metadata