agent-sync-coordinator
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute shell commands for repository management via the GitHub CLI (gh), as well as package installation and testing (npm install,npm test). These operations are essential for its functionality as a synchronization coordinator and are executed within the context of the user's workspaces. - [EXTERNAL_DOWNLOADS]: The synchronization workflows include the installation of dependencies from the NPM registry. These downloads are performed from a well-known and trusted service registry.
- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it reads and processes contents from external repository files.
- Ingestion points: The skill reads project files such as
package.jsonandCLAUDE.mdfrom local and remote repositories. - Boundary markers: The analyzed patterns do not show explicit delimiters or "ignore instructions" warnings when interpolating these file contents into agent tasks.
- Capability inventory: The skill has access to high-privilege tools including
Bash(command execution),Write/Edit(file system modification), and GitHub API tools (repository management). - Sanitization: No explicit content sanitization or validation of the ingested repository data was identified.
Audit Metadata