rig
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard CLI tools to perform its tasks. It uses
gitfor repository management,npm/npxfor dependency installation and hook management, andaz(Azure CLI) for pipeline registration. These operations are consistent with the skill's stated purpose of repository standardization. - [EXTERNAL_DOWNLOADS]: The skill manages external dependencies by checking for their existence and optionally installing them. For example, it installs the
lefthookpackage from the official NPM registry. It also directs users to official websites for tools like Git and the GitHub CLI. These downloads and references are from well-known technology providers. - [PROMPT_INJECTION]: The skill analyzes local repository data, such as branch names and build scripts, which are considered untrusted inputs. However, the skill incorporates a mandatory approval step where the user must review and confirm the proposed changes before execution, which effectively mitigates risks associated with indirect prompt injection from malicious repository content.
Audit Metadata