antfu-issue-triage
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from GitHub issue titles, bodies, and comments.
- Ingestion points: Untrusted data enters the agent context via
gh issue listandgh pr listcommands in the 'Scope' and 'Map references' workflow steps. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for the fetched content when it is analyzed by the agent.
- Capability inventory: The skill possesses write capabilities including
gh issue comment,gh issue edit,gh issue close, andgh label create. - Sanitization: There is no evidence of sanitization or escaping of the fetched issue/PR content before it is processed.
- [COMMAND_EXECUTION]: The skill relies on shell command execution to interact with the repository.
- Evidence: Uses
ghandgitCLI tools to fetch data and perform triage actions. While these are legitimate tools for the skill's purpose, they are used to process and act upon data retrieved from external, untrusted sources.
Audit Metadata