contribute
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and prioritize instructions from local files within the cloned repository (such as
CONTRIBUTING.md,DEVELOPMENT.md, andAGENTS.md). While these files define the repository's contribution rules, they represent an ingestion point for untrusted data if the repository were compromised. - Ingestion points:
CONTRIBUTING.md,DEVELOPMENT.md,AGENTS.mdlocated in the root of the clonedsuperset-sh/supersetrepository. - Boundary markers: None specified; the agent is instructed to treat these files as authoritative.
- Capability inventory: The skill utilizes
Bashviagh,bun, andgitfor repository management, script execution, and testing. - Sanitization: No explicit sanitization or validation of the markdown content is performed before processing.
- [DYNAMIC_EXECUTION]: The skill executes a local setup script
./.superset/setup.local.shand various lifecycle commands viabun run(lint, test, dev). These are standard operations for setting up a local development environment for the Superset project and are performed within the context of the vendor's own repository.
Audit Metadata