poteto-mode
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/bootstrap.tsscript automates the installation of Node.js dependencies usingbun install --frozen-lockfile. This is used to maintain the local execution environment for the skill's utility tools. - [COMMAND_EXECUTION]: The skill makes extensive use of local CLI tools to interact with the repository and environment. This includes shell scripts like
scripts/worktree-audit.shand TypeScript tools that execute commands such asgit,gh(GitHub CLI),gt(Graphite CLI),du,jq, andrgviachild_process.spawnandexecFileSync. - [DYNAMIC_EXECUTION]: In
scripts/bootstrap.ts, the skill employsBun.spawnSyncto restart the current process with its original arguments after completing a dependency installation wave, ensuring that the updated environment is active immediately. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a broad ingestion surface, processing external pull request descriptions, review threads, and automated bot comments. However, it incorporates strong defensive measures, such as explicit instructions in
playbooks/babysit.mdandreferences/bugbot-triage.mdto treat external text as untrusted data and triage it skeptically to prevent adversarial influence.
Audit Metadata