soia-pkm-clip-github-repo
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/gen_repo_catalog.pyto executegitcommands. Specifically, it usesgit cloneto download repositories,git remote get-urlto identify the repository source, andgit logto retrieve the latest commit date. These commands are executed with controlled arguments and are central to the skill's stated purpose of indexing code repositories. - [EXTERNAL_DOWNLOADS]: The skill fetches external content by cloning GitHub repositories to a user-defined "upstream" directory. This involves downloading third-party code from remote servers. The skill explicitly handles cloning failures (e.g., due to network issues or private repositories) by falling back to a minimal metadata-only entry.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external
README.mdfiles to generate repository summaries. - Ingestion points: The
first_summary_linefunction inscripts/gen_repo_catalog.pyreads the content of README files from the cloned repositories. - Boundary markers: The extracted summary is placed directly into the Markdown body of the project card without specific boundary markers or warnings about external content.
- Capability inventory: The skill has the capability to execute shell commands (
git) and write files to the local file system within the Obsidian vault and the upstream cache. - Sanitization: The skill includes a
clean_linefunction that uses regular expressions to strip HTML tags, Markdown images, links, and formatting markers from the extracted text to ensure the resulting summary is plain text.
Audit Metadata