github-agentic-workflows
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of a GitHub CLI extension from the official
githuborganization and downloads workflow templates fromgithubnext. These are well-known and reputable sources associated with the platform's development. - [COMMAND_EXECUTION]: Uses the GitHub CLI (
gh) and standard filesystem operations to perform repository management tasks such as triaging issues and creating pull requests. This behavior is the intended and primary function of the skill. - [PROMPT_INJECTION]: The skill processes untrusted input from repository issues, pull request descriptions, and workflow logs. This creates a surface for indirect prompt injection (e.g., a malicious issue title attempting to influence the agent). This is an inherent risk in processing external content, and the skill's operations are limited by the repository token's permissions.
Audit Metadata