setting-up-python-projects
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
bootstrap_downstream_repo.shscript fetches project templates from a remote GitHub repository. By default, it targets the author's own repository (https://github.com/quick-brown-foxxx/coding_rules_python.git). - [REMOTE_CODE_EXECUTION]: Upon cloning the template repository, the script automatically runs
uv syncto install dependencies anduv run poeto execute verification tasks (linting and testing). This results in the execution of code defined in the remote templates during the bootstrap process. - [COMMAND_EXECUTION]: The utility executes various system commands to set up the project environment, including
mkdir,cp,ln,sed, andgit. These are used for directory creation, file copying, symbolic link creation, and configuration management. - [INDIRECT_PROMPT_INJECTION]: The script represents a vulnerability surface by ingesting user-provided inputs:
- Ingestion points: Command line arguments
--package-name,SOURCE_REPO, andTARGET_REPOinbootstrap_downstream_repo.sh. - Boundary markers: The package name is validated using a regular expression (
^[A-Za-z_][A-Za-z0-9_]*$) and checked against Python reserved words. - Capability inventory: The script has capabilities for
git clone,mkdir,cp,sed,ln,uv sync, anduv run(bootstrap_downstream_repo.sh). - Sanitization: Package name input is sanitized via regex validation, and the target path is normalized using
realpath -m.
Audit Metadata