triaging-security-findings
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external security scanners and provides the capability to modify repository security states based on that data. \n- Ingestion points: GitHub Advanced Security API alerts, including code scanning, Dependabot, and secret scanning results (SKILL.md). \n- Boundary markers: The skill does not define explicit delimiters or instructions to the agent to ignore potentially malicious content embedded within the scanner findings. \n- Capability inventory: The skill provides commands to update alert states (e.g., dismissal as false positive) using
gh api -X PATCH(SKILL.md). \n- Sanitization: The process relies on manual documentation of rationale for changes rather than automated validation or sanitization of the incoming API data. \n- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to perform read and write operations against the GitHub Advanced Security API for vulnerability management.
Audit Metadata