implementation-preflight
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository-provided data including commit logs, file diffs, and documentation files to determine the correct branching strategy, creating a surface for indirect prompt injection if the repository contains malicious instructions in these fields.\n
- Ingestion points: Git commit messages, diff outputs, and repository documentation files such as CONTRIBUTING.md or README.md (SKILL.md, Step 1).\n
- Boundary markers: The instructions do not define delimiters or specific warnings to prevent the model from following instructions embedded in the ingested repository data.\n
- Capability inventory: The skill executes shell-level Git commands (switch, fetch, checkout) and GitHub CLI operations (gh pr) based on the processed data.\n
- Sanitization: No explicit sanitization or filtering of the repository data is performed before it is used to influence the agent's workflow.\n- [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI tools to perform system-level operations such as switching branches and fetching remote references.\n- [EXTERNAL_DOWNLOADS]: The documentation references installation from a GitHub repository (SirDarcanos/agentskills) using a package runner (npx).
Audit Metadata