github-ops
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines standard operational guidelines for GitHub integration without any detected malicious patterns or unauthorized data access techniques.
- [SAFE]: Authentication is managed through environment variables rather than hardcoded credentials, following secret management best practices.
- [SAFE]: The skill explicitly includes rules to prevent the accidental commitment of secrets or sensitive keys to version control systems.
- [INDIRECT_PROMPT_INJECTION]: The skill processes network data and audit reports to create GitHub issues and pull requests, representing a potential indirect prompt injection surface. However, this is consistent with the skill's intended administrative purpose and no exploitation patterns were found. Ingestion points: network findings and audit reports (SKILL.md); Boundary markers: none; Capability inventory: GitHub file, issue, and PR creation; Sanitization: none.
Audit Metadata