heygrc
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README.md file includes instructions to download the SKILL.md file from the author's official GitHub repository (https://raw.githubusercontent.com/better-isms/heygrc-skill/main/SKILL.md). This is a standard delivery mechanism for the skill's logic.
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it interpolates user input from the $ARGUMENTS variable directly into its instructions.
- Ingestion point: The $ARGUMENTS variable located in the SKILL.md file.
- Boundary markers: The skill does not utilize delimiters or specific instructions to isolate user-provided text from the system prompt.
- Capability inventory: The skill possesses no capabilities for tool invocation, shell command execution, or network access.
- Sanitization: No sanitization or validation of the user-provided arguments is implemented.
Audit Metadata