sync-global-rules
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches rule sets and documentation from the author's repository
nangongwentian-fe/Awesome-GlobalRuleusing the GitHub API (gh api). This behavior is transparent and consistent with the skill's primary purpose. - [COMMAND_EXECUTION]: Executes shell scripts (
check_updates.shandsync.sh) to interact with the file system and external APIs. These scripts handle state management, backups of existing configuration files, and directory creation in the user's home folder. - [DATA_EXFILTRATION]: The skill performs network operations to fetch updates and content from GitHub. No patterns of sensitive data collection or transmission to unauthorized domains were detected.
- [PROMPT_INJECTION]: The skill downloads markdown files that are used as instructions for AI tools. While this creates a surface for behavior modification, the source repository is explicitly identified, and the functionality is intended for synchronizing global rules as requested by the user.
Audit Metadata