source-command-catchup
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands such as
git log,gh issue list, andtree. These are used for repository analysis and state discovery, which is the primary purpose of the skill. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it ingests content from the repository. 1. Ingestion points: Git commit messages, GitHub issue descriptions, and documentation files. 2. Boundary markers: The skill does not define explicit delimiters to isolate external content from the agent instructions. 3. Capability inventory: The skill utilizes shell commands and file reading. 4. Sanitization: No sanitization of ingested repository content is performed before processing.
- [SAFE]: No malicious patterns such as credential exfiltration or unauthorized remote code execution were detected. All network operations via the GitHub CLI target a well-known service for legitimate project data.
Audit Metadata