sdd-setup
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
mattpocock/skillspackage usingnpxto provide the base skill management harness needed for the workflow. - [COMMAND_EXECUTION]: Uses the GitHub CLI (
gh) to perform administrative tasks such as verifying environment requirements, checking authentication, creating labels, and managing organization-wide issue types. - [INDIRECT_PROMPT_INJECTION]: Writes a structured routing block to
CLAUDE.mdorAGENTS.md. This persists instructions that define how the agent should handle planning and building tasks in subsequent sessions. - [EXTERNAL_DOWNLOADS]: Configures GitHub Action templates that download the
claude-code-actionand associated plugins from the author's (syn54x) repository. - [DATA_EXFILTRATION]: Includes an optional feedback mechanism that allows the agent to propose skill-defect reports to the author's GitHub repository. This feature is opt-in and requires explicit human approval before any data is sent.
Audit Metadata