github
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill integrates with external GitHub data which serves as a vector for indirect prompt injection.
- Ingestion points: Data from external sources is ingested via
github_get_issue,github_get_pull,github_get_file, andgithub_search_codeinSKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external content from the agent's system instructions.
- Capability inventory: The skill possesses significant capabilities that could be targeted by an injection, including
github_push_filesandgithub_create_pull_request. - Sanitization: The skill does not specify any sanitization or validation logic for the data retrieved from GitHub before it is processed by the agent.
Audit Metadata