factory-setup

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local CLI tools to facilitate repository setup and verification. It executes git remote get-url origin to heuristically determine the hosting provider and uses provider-specific CLIs (gh for GitHub, glab for GitLab) to audit and provision repository labels.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external repository state which serves as an untrusted input surface. Ingestion points: Reads data from git remotes, existing .adlc/issues-provider.yml files, and remote label lists. Boundary markers: The skill logic mandates user confirmation for both mode selection and final configuration writes. Capability inventory: Includes file-write access to the .adlc directory and label management via CLI tools. Sanitization: Implements strict allow-listing for the provider field and actively scans for and rejects common credential patterns (e.g., ghp_, glpat-) to prevent accidental secret exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 06:21 AM