share-a-library
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
git,gh, andnpxto perform repository initialization, commits, remote creation, and documentation building.\n- [EXTERNAL_DOWNLOADS]: Fetches and executes theai-agent-skillspackage from the npm registry vianpx. This package is a vendor-owned resource for the author 'skillcreatorai'.\n- [DATA_EXFILTRATION]: Employsgit add .followed bygh repo create --publicto upload the entire local workspace to a public GitHub repository. This behavior creates a risk of exposing sensitive files or credentials if they are not explicitly excluded by the user.\n- [PROMPT_INJECTION]: Indirect prompt injection surface identified. \n - Ingestion points: All local files in the current workspace (SKILL.md via
git add .).\n - Boundary markers: None present to delimit untrusted file content from instructions.\n
- Capability inventory: File system access (git), network access (gh, git push), and command execution (npx ai-agent-skills).\n
- Sanitization: No validation or filtering is performed on the files before they are processed by the build-docs or publish commands.
Audit Metadata