skills/slamb2k/mad-skills/rig/Gen Agent Trust Hub

rig

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several standard CLI tools to perform its tasks. It uses git for repository management, npm/npx for dependency installation and hook management, and az (Azure CLI) for pipeline registration. These operations are consistent with the skill's stated purpose of repository standardization.
  • [EXTERNAL_DOWNLOADS]: The skill manages external dependencies by checking for their existence and optionally installing them. For example, it installs the lefthook package from the official NPM registry. It also directs users to official websites for tools like Git and the GitHub CLI. These downloads and references are from well-known technology providers.
  • [PROMPT_INJECTION]: The skill analyzes local repository data, such as branch names and build scripts, which are considered untrusted inputs. However, the skill incorporates a mandatory approval step where the user must review and confirm the proposed changes before execution, which effectively mitigates risks associated with indirect prompt injection from malicious repository content.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 07:38 PM