tailrocks-contribute-submit
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local TypeScript helper script (
scripts/contribute-submit.ts) and various Git commands to manage repository remotes, commits, and the creation of pull requests. - [EXTERNAL_DOWNLOADS]: Communicates with remote Git servers to push code changes and synchronize repository state.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content and external pull request metadata which could contain adversarial instructions. It attempts to mitigate this risk through a referenced 'Runtime Trust' policy that explicitly restricts the authority of embedded instructions.
Audit Metadata