registering-dream-repositories
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents standard interactions with the Taubyte local development environment and the GitHub API. It uses legitimate vendor resources (taubyte.com) and well-known services (github.com). Network calls to localhost and GitHub are considered safe within the context of this registration workflow.- [INDIRECT_PROMPT_INJECTION]: The documented workflow identifies an input surface where data is read from local configuration files (config/websites/ and config/libraries/) to be used as parameters in shell commands. While this is a standard developer workflow, it technically constitutes untrusted data ingestion if project files are externally influenced.
- Ingestion points: Data is sourced from configuration files in the config/ directory via grep.
- Boundary markers: None present in the provided shell snippets.
- Capability inventory: Network operations via curl to api.github.com and localhost.
- Sanitization: Input variables are used directly as shell variables without explicit sanitization.
Audit Metadata