sync-template
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches structural improvements, manifests, and skill files from the vendor's remote repository at
https://github.com/Rheinmir/setup.gitandhttps://raw.githubusercontent.com/Rheinmir/setup/master/. - [COMMAND_EXECUTION]: The skill invokes local Python scripts (
harness/scripts/sync-template.py,harness/scripts/health-check.py,harness/scripts/okf-check.py) and uses system binaries likecurlandpython3to perform synchronization and health checks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from a remote repository and interpolates it into the local environment.
- Ingestion points: Remote files fetched from the
Rheinmir/setupGitHub repository. - Boundary markers: None explicitly implemented to delimit remote content during processing.
- Capability inventory: File system write access to project directories and user-level agent configuration paths; network access via
curlandgh api. - Sanitization: The skill contains rules (RULE-01) to explicitly skip sensitive files such as
.envand credentials. - [DYNAMIC_EXECUTION]: The skill generates and modifies skill and command files by prepending YAML frontmatter to downloaded content before installing them into agent-specific configuration paths (
.claude/commands/,~/.claude/skills/). - [PERSISTENCE]: The skill installs synchronized files into the agent's global configuration directories (
~/.claude/skills/and~/.claude/commands/), ensuring the downloaded logic persists across different agent sessions and projects.
Audit Metadata