wizard
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest human input through the
askandask_secretfunctions in the generated scripts. This input is then used to populate environment variables and GitHub secrets. - Ingestion points:
template.shuses thereadcommand to capture interactive user input at runtime. - Boundary markers: No specific delimiters or boundary markers are used to isolate the user-provided content from the script logic.
- Capability inventory: The generated scripts possess capabilities to write to the local file system (
write_env) and interact with remote services via the GitHub CLI (set_secret,set_var). - Sanitization: While the template uses
printf -vfor variable assignment, the subsequent storage of these values in.envfiles via string concatenation lacks comprehensive escaping for complex shell-special characters. - [DYNAMIC_EXECUTION]: The skill's core function is the generation of executable bash scripts from a template. It explicitly instructs the agent to create these scripts and modify their permissions using
chmod +x. - The scripts are generated based on a provided library (
template.sh), which limits the scope of the generated code to a predefined set of helper functions, though the final script is intended to be executed in the user's environment.
Audit Metadata