standardize-github-repo
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local
gitandgh(GitHub CLI) commands to check repository status, commit standardized documentation, and verify CI workflow results. These operations are restricted to the local repository context and are necessary for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill generates a GitHub Actions workflow template that utilizes
actions/checkoutandDavidAnson/markdownlint-cli2-action. These are standard, well-known resources from the GitHub marketplace used for repository automation and linting. - [PROMPT_INJECTION]: The skill processes project files (manifests, source code, and documentation) to generate project summaries and README content. While this creates an indirect prompt injection surface where data from the repository could influence the agent's behavior, the skill includes a mandatory interactive phase where the user must manually validate and approve every generated section before any files are written or committed.
Audit Metadata