artifact-sbom-publisher
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes the Syft installation script from the official Anchore GitHub repository via curl piped to the shell. This is a common and expected installation method for a well-known industry security tool from an official vendor source.
- [INDIRECT_PROMPT_INJECTION]: The skill contains workflows that ingest repository source code to generate security metadata, creating a potential surface for instructions embedded in source data to influence the build process.
- Ingestion points: Project files accessed via actions/checkout@v4 in SKILL.md.
- Boundary markers: Standard YAML blocks for GitHub Actions workflows.
- Capability inventory: Shell command execution (run), file system writes, and artifact uploads (actions/upload-artifact@v4) across multiple workflow steps.
- Sanitization: Leverages the built-in process isolation and security controls provided by GitHub Actions runner environments.
Audit Metadata