update-from-upstream-main
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses standard Git commands like
git fetch,git merge, andgit pushto manage repository state and synchronization. - [COMMAND_EXECUTION]: Executes project validation scripts using
bun run buildandbun run stylecheckto ensure repository integrity after merging. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources. • Ingestion Point:
git fetchupdates the local repository with content from theremotion-dev/remotionremote inSKILL.md. • Boundary Markers: No explicit delimiters or instructions are used to separate untrusted content from the agent's logic. • Capability Inventory: The skill can execute commands viagit commit,git push, andbun runas defined inSKILL.md. • Sanitization: The skill usesgit diff --checkandrgto search for and remove conflict markers before committing. The targeted repository is the vendor's canonical source.
Audit Metadata