standardize-project
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive configuration files including
.env,.env.*, andfnox.tomlto audit and migrate secret management to 1Password. It identifies key names for migration but explicitly instructs the agent never to print, commit, or paste actual secret values. - [COMMAND_EXECUTION]: The skill executes shell commands using the
misetool manager to install packages and verify project health viamise trust,mise install, andmise run. These commands are run within the context of the target repository to align it with project standards. - [EXTERNAL_DOWNLOADS]: Fetches project standards and best practices from the
The-Focus-AI/standardsrepository. It also installs CLI tools and agent skills from the npm registry and other remote sources usingmise useandskills add. - [PROMPT_INJECTION]: The skill processes untrusted data from the target repository's documentation and agent instructions, creating a surface for indirect prompt injection.
- Ingestion points: Reads
AGENTS.md,CLAUDE.md,.cursor/rules, and README files from the target repository. - Boundary markers: No explicit delimiters or instructions are used to separate untrusted file content from the agent's instructions.
- Capability inventory: The skill possesses the ability to execute shell commands (
mise,fnox,skills) and write to the local filesystem. - Sanitization: There is no evidence of sanitization or filtering of the content ingested from the target repository.
Audit Metadata