agent-sync-coordinator

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute shell commands for repository management via the GitHub CLI (gh), as well as package installation and testing (npm install, npm test). These operations are essential for its functionality as a synchronization coordinator and are executed within the context of the user's workspaces.
  • [EXTERNAL_DOWNLOADS]: The synchronization workflows include the installation of dependencies from the NPM registry. These downloads are performed from a well-known and trusted service registry.
  • [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it reads and processes contents from external repository files.
  • Ingestion points: The skill reads project files such as package.json and CLAUDE.md from local and remote repositories.
  • Boundary markers: The analyzed patterns do not show explicit delimiters or "ignore instructions" warnings when interpolating these file contents into agent tasks.
  • Capability inventory: The skill has access to high-privilege tools including Bash (command execution), Write/Edit (file system modification), and GitHub API tools (repository management).
  • Sanitization: No explicit content sanitization or validation of the ingested repository data was identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 04:33 PM