sync-template
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Clones the template repository from the author's GitHub account (blogic-cz/blogic-template-ts) to provide a local source for comparison and synchronization.
- [COMMAND_EXECUTION]: Executes a variety of local development commands including
bun run,git,gh, anddiffto manage the lifecycle of the template synchronization process. - [DATA_EXFILTRATION]: Accesses external data via the GitHub CLI (
gh) to fetch release history and pull request details from the upstream repository. This information is used solely for identifying changes between template versions. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data from GitHub releases and pull requests.
- Ingestion points: Data retrieved from
gh release viewandgh pr list. - Boundary markers: Absent in the instructions when processing external text.
- Capability inventory: Includes file system write operations and the ability to execute local build scripts.
- Sanitization: None specified for the text ingested from remote sources.
Audit Metadata