poteto-mode

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/bootstrap.ts script automates the installation of Node.js dependencies using bun install --frozen-lockfile. This is used to maintain the local execution environment for the skill's utility tools.
  • [COMMAND_EXECUTION]: The skill makes extensive use of local CLI tools to interact with the repository and environment. This includes shell scripts like scripts/worktree-audit.sh and TypeScript tools that execute commands such as git, gh (GitHub CLI), gt (Graphite CLI), du, jq, and rg via child_process.spawn and execFileSync.
  • [DYNAMIC_EXECUTION]: In scripts/bootstrap.ts, the skill employs Bun.spawnSync to restart the current process with its original arguments after completing a dependency installation wave, ensuring that the updated environment is active immediately.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a broad ingestion surface, processing external pull request descriptions, review threads, and automated bot comments. However, it incorporates strong defensive measures, such as explicit instructions in playbooks/babysit.md and references/bugbot-triage.md to treat external text as untrusted data and triage it skeptically to prevent adversarial influence.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 06:21 AM
Security Audit — agent-trust-hub — poteto-mode