sync-repos

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes a generated or existing shell script (scripts/sync-public.sh) using bash to perform repository synchronization.\n- [COMMAND_EXECUTION]: Utilizes system commands including rsync (with file deletion enabled via --delete-excluded), git clean, find, and grep for file management and content validation.\n- [SAFE]: Features a defensive PII and secrets scanner that inspects repository content for sensitive patterns (e.g., email addresses, API keys, AWS credentials) to prevent accidental data exposure.\n- [EXTERNAL_DOWNLOADS]: References an installation source on GitHub within the author's own namespace (github.com/thatrebeccarae/claude-skills).\n- [PROMPT_INJECTION]: Ingests local repository configuration and file data. While this presents a surface for Indirect Prompt Injection, the skill uses these inputs for file path construction and pattern matching rather than direct prompt interpolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 06:55 PM