github-operation
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill proactively addresses indirect prompt injection risks by mandating that all GitHub-sourced content (issue bodies, comments, review text, and CI logs) be treated as untrusted external input and not as instructions to obey.
- [CREDENTIALS_SAFE]: The instructions emphasize credential safety, explicitly requiring that tokens be kept out of every command, log, and line of output produced during operations.
- [COMMAND_EXECUTION]: The guidelines restrict high-risk operations by requiring explicit human approval for destructive actions such as
git commit --amendon existing commits or force-pushing (git push --force). - [DATA_EXFILTRATION]: No data exfiltration patterns were found. The skill focuses on standard GitHub API and Git operations through sanctioned tool channels.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The included Node.js script
scripts/decode-sanitized-read.mjsis a self-contained utility that uses only built-in Node.js modules for string manipulation.
Audit Metadata