triage-board
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several command-line tools including
gh(GitHub CLI),jq,python3,awk, andgrepto interact with GitHub Projects and process data. - Evidence found in
references/board-queries.md, which contains bash scripts for board resolution, item enumeration, and mutation. - Evidence in the enumeration step using a
python3one-liner to validate JSON data lengths. - [INDIRECT_PROMPT_INJECTION]: The skill reads and analyzes GitHub issue bodies, which are untrusted external inputs, to drive decision-making for board updates.
- Ingestion points: The
content.bodyof issues is retrieved inreferences/board-queries.mdfor triage analysis. - Boundary markers: The instructions in
references/triage-rubric.mddo not specify delimiters or warnings to ignore malicious instructions embedded in issue bodies. - Capability inventory: The skill is capable of performing data mutations on GitHub Projects using
gh api graphqland modifying labels viagh issue editas described inreferences/board-queries.md. - Sanitization: No explicit sanitization or filtering of issue content is performed prior to the agent's evaluation against the triage rubric.
Audit Metadata