standardize-github-repo

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local git and gh (GitHub CLI) commands to check repository status, commit standardized documentation, and verify CI workflow results. These operations are restricted to the local repository context and are necessary for the skill's stated purpose.
  • [EXTERNAL_DOWNLOADS]: The skill generates a GitHub Actions workflow template that utilizes actions/checkout and DavidAnson/markdownlint-cli2-action. These are standard, well-known resources from the GitHub marketplace used for repository automation and linting.
  • [PROMPT_INJECTION]: The skill processes project files (manifests, source code, and documentation) to generate project summaries and README content. While this creates an indirect prompt injection surface where data from the repository could influence the agent's behavior, the skill includes a mandatory interactive phase where the user must manually validate and approve every generated section before any files are written or committed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 11:30 AM
Security Audit — agent-trust-hub — standardize-github-repo