authoring-plugins
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines automation workflows that execute various shell commands, including
git(for commits, tags, and status),find(for file discovery),brew(for dependency installation like pandoc), andgh(for pull request data). It also utilizes custom local scripts such aspdf-to-markdownandvalidate-conversion.mjsto process documentation. - [EXTERNAL_DOWNLOADS]: The conversion module (
CONVERTING.md) usescurlandwgetto fetch content from external URLs to convert web documentation into skills. It also suggests downloading thepandocutility via Homebrew if it is not present on the system. - [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!command`` syntax inPATTERNS.mdandSKILL-GUIDE.mdto inject real-time project metadata (e.g.,git branch,git log,findresults) into the agent's context during skill load to provide current environment awareness. - [INDIRECT_PROMPT_INJECTION]: The skill implements a data-ingestion surface that processes untrusted external content (PDFs, EPUBs, and web pages) to generate instruction sets. This risk is mitigated by a multi-phase workflow that requires explicit human review and confirmation (Phase B: User Confirmation) before the final skill is generated and deployed.
Audit Metadata