skills/microsoft/vscode/sync-upstream/Gen Agent Trust Hub

sync-upstream

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • Standard Development Workflow: The skill implements a common Git pattern using git fetch and git rebase to stay current with a main repository. These are essential operations for version control and do not introduce unexpected security risks.
  • Guidance for Conflict Resolution: The instructions provide clear logic for handling merge conflicts, prioritizing upstream consistency. This helps maintain the integrity of the codebase during synchronization.
  • External Data Interaction: By design, the skill interacts with content from upstream repositories. While any process that ingests external code has a theoretical surface for indirect prompt injection, this skill manages that risk through standard conflict resolution and post-rebase validation steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 07:23 AM
Security Audit — agent-trust-hub — sync-upstream