flatpak-sdk-extension-maintenance
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from GitHub pull requests and repository manifests (JSON, YAML, XML) to determine update parameters. Ingestion occurs via 'gh pr view' and by reading remote repository files. There are no explicit boundary markers or instructions to ignore embedded commands when processing these external inputs, and the agent has capabilities including shell command execution (git, gh) and file downloads.
- [DYNAMIC_EXECUTION]: During the validation phase, the skill instructs the agent to 'Run relevant lightweight repository lint commands when present.' This represents an instruction to execute scripts or tools defined within the repository being maintained, which is a dynamic execution surface for code from a potentially untrusted source.
- [EXTERNAL_DOWNLOADS]: The skill fetches source archives from URLs specified in Flatpak manifests to verify their declared checksums. While this is a core function for ensuring build integrity, it involves network operations targeting remote servers defined in untrusted input manifests.
Audit Metadata