sync-template

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Clones the template repository from the author's GitHub account (blogic-cz/blogic-template-ts) to provide a local source for comparison and synchronization.
  • [COMMAND_EXECUTION]: Executes a variety of local development commands including bun run, git, gh, and diff to manage the lifecycle of the template synchronization process.
  • [DATA_EXFILTRATION]: Accesses external data via the GitHub CLI (gh) to fetch release history and pull request details from the upstream repository. This information is used solely for identifying changes between template versions.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data from GitHub releases and pull requests.
  • Ingestion points: Data retrieved from gh release view and gh pr list.
  • Boundary markers: Absent in the instructions when processing external text.
  • Capability inventory: Includes file system write operations and the ability to execute local build scripts.
  • Sanitization: None specified for the text ingested from remote sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 03:43 PM