repo-scan
Fail
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions direct the agent to fetch code from a third-party GitHub repository (https://github.com/haibindev/repo-scan.git).
- [REMOTE_CODE_EXECUTION]: The skill downloads external code and copies it into the local skill directory, where it is intended to be executed for repository analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code from repositories it scans, creating an attack surface for instructions hidden within data.
- Ingestion points: The skill reads all files within a target directory to classify code and detect libraries (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore instructions within the analyzed data are provided.
- Capability inventory: The skill uses file-read capabilities and directory enumeration to generate analysis reports (SKILL.md).
- Sanitization: There is no evidence of sanitization or filtering of the file content before it is processed by the agent.
Recommendations
- AI detected serious security threats
Audit Metadata