opensource-pipeline

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes arbitrary code and configuration files from a source directory. These files could contain instructions designed to deceive the LLM agents during the sanitization or packaging phases. 1. Ingestion points: Project files are read from the SOURCE_PATH provided by the user. 2. Boundary markers: The orchestration logic does not specify explicit markers to separate project data from agent instructions. 3. Capability inventory: The skill possesses the ability to read/write to the filesystem in a staging directory and use the gh CLI for repository management. 4. Sanitization: The skill includes a specific opensource-sanitizer sub-agent that performs multi-category scans (Secrets, PII, Internal refs) to mitigate risks.
  • [COMMAND_EXECUTION]: The skill automates repository management and filesystem organization using standard shell utilities and the GitHub CLI tool. Evidence: Execution of mkdir, ls, cat, and gh CLI for creating and pushing public repositories. Safety is maintained through mandatory user approval checkpoints before any public deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 01:16 AM