github-monitor
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard tools like the
ghCLI and official GitHub APIs to monitor repository activity. All network operations are directed at well-known, trusted GitHub domains. No malicious code, obfuscation, or unauthorized data exfiltration attempts were found. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources including issue titles, pull request descriptions, and release notes.
- Ingestion points: External content enters the agent context through GitHub API responses and CLI outputs (SKILL.md).
- Boundary markers: A specific 'Security' section instructs the agent to treat fetched data as untrusted and ignore any embedded commands (SKILL.md).
- Capability inventory: Uses standard command-line tools for processing and limited local storage in the
memory/directory (SKILL.md). - Sanitization: Recommends summarization and plain-string rendering to mitigate the risk of accidental execution of instructions within the fetched data (SKILL.md).
Audit Metadata