agentic-qa-onboard
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to open visual documentation decks hosted on the vendor's official GitHub Pages site (
upex-galaxy.github.io). - [EXTERNAL_DOWNLOADS]: Describes the repository's interactive setup process (
bun setup), which downloads browser binaries and optional community-developed agent skills from various GitHub repositories. - [COMMAND_EXECUTION]: Directs the agent to use operating system commands such as
open,xdg-open, orstartto launch the user's default browser to view specific HTML presentation files. - [COMMAND_EXECUTION]: Documents the use of local utility scripts executed via
bun runfor tasks like syncing Jira data, checking project configuration health, and verifying environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a protocol for reading project-specific metadata from local configuration files (
.agents/project.yamland.agents/jira-workflows.json) to ensure the agent provides accurate information based on the current project context.
Audit Metadata