oss-contributor-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external repository data, specifically repository files and pull request comments from strangers (SKILL.md, Step 1.4). While these data sources could theoretically contain malicious instructions, this intake is fundamental to the skill's primary task of auditing contributor communication and barriers.
- Ingestion points: Repository content, documentation files, and historical pull request commentary.
- Boundary markers: Not explicitly defined; the agent processes external text as data for analysis.
- Capability inventory: The agent has the ability to execute the local audit script and provide written recommendations.
- Sanitization: The skill focuses on qualitative analysis of the content rather than execution of data-derived strings.
- [COMMAND_EXECUTION]: The skill utilizes a local shell script (
scripts/contributor-path-audit.sh) to perform mechanical analysis of the target repository (SKILL.md, Step 1.1). The script employs standard, portable POSIX tools (git, find, grep, awk, etc.) to calculate contributor metrics and verify the presence of community health files. All execution is localized to the provided repository path and intended for metric collection.
Audit Metadata