sync-ups
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script 'scripts/sync_upstream.py' executes the 'git' command-line tool using 'subprocess.run' to perform repository operations, including fetching updates, listing files, and reading file content.
- [EXTERNAL_DOWNLOADS]: The skill connects to the external GitHub repository 'https://github.com/majidmanzarpour/threejs-game-skills.git' to retrieve updates and synchronize skill files.
- [SAFE]: The behavior of the skill is transparent, well-documented, and strictly aligned with its stated purpose of repository synchronization. It includes mechanisms such as a manifest baseline to track changes and prevent the accidental deletion or overwriting of local-only files.
Audit Metadata