sync-repos
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a generated or existing shell script (
scripts/sync-public.sh) usingbashto perform repository synchronization.\n- [COMMAND_EXECUTION]: Utilizes system commands includingrsync(with file deletion enabled via--delete-excluded),git clean,find, andgrepfor file management and content validation.\n- [SAFE]: Features a defensive PII and secrets scanner that inspects repository content for sensitive patterns (e.g., email addresses, API keys, AWS credentials) to prevent accidental data exposure.\n- [EXTERNAL_DOWNLOADS]: References an installation source on GitHub within the author's own namespace (github.com/thatrebeccarae/claude-skills).\n- [PROMPT_INJECTION]: Ingests local repository configuration and file data. While this presents a surface for Indirect Prompt Injection, the skill uses these inputs for file path construction and pattern matching rather than direct prompt interpolation.
Audit Metadata