factory-setup
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local CLI tools to facilitate repository setup and verification. It executes
git remote get-url originto heuristically determine the hosting provider and uses provider-specific CLIs (ghfor GitHub,glabfor GitLab) to audit and provision repository labels. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external repository state which serves as an untrusted input surface. Ingestion points: Reads data from git remotes, existing
.adlc/issues-provider.ymlfiles, and remote label lists. Boundary markers: The skill logic mandates user confirmation for both mode selection and final configuration writes. Capability inventory: Includes file-write access to the.adlcdirectory and label management via CLI tools. Sanitization: Implements strict allow-listing for theproviderfield and actively scans for and rejects common credential patterns (e.g.,ghp_,glpat-) to prevent accidental secret exposure.
Audit Metadata