github-release-downloader
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and presents release names and descriptions from GitHub. This untrusted data could be manipulated to include malicious instructions aimed at the agent.
- Ingestion points: Release data is fetched via the GitHub API in
scripts/download_release.py. - Boundary markers: There are no explicit delimiters to isolate untrusted data from the agent's instructions.
- Capability inventory: The skill performs network requests to GitHub and downloads files to the local system.
- Sanitization: Metadata is displayed to the agent without sanitization or escaping.
- [EXTERNAL_DOWNLOADS]: The script uses the Tsinghua University mirror for Python packages.
- Evidence: The UV configuration in
scripts/download_release.pypoints tohttps://mirrors.tuna.tsinghua.edu.cn/pypi/web/simple. - [COMMAND_EXECUTION]: The skill uses
uv runto execute a Python script that interacts with the file system and network.
Audit Metadata