github
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the GitHub CLI (
gh) to perform repository management tasks, including querying issues, pull requests, and workflow logs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources (GitHub) which could contain malicious instructions designed to influence the agent.
- Ingestion points: GitHub repository data fetched via
gh issue list,gh pr checks,gh run view, andgh api(SKILL.md). - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined to protect the agent from data-based instructions.
- Capability inventory: The skill utilizes shell execution for the
ghCLI subcommands. - Sanitization: The instructions do not include steps for sanitizing, filtering, or validating the content retrieved from GitHub before it is processed by the agent.
Audit Metadata