github-cli-workarounds
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation on secure shell command construction. It recommends using quoted heredocs (
<< 'EOF') and the--body-fileargument to prevent shell expansion and potential command injection vulnerabilities when handling content with special characters like dollar signs, backticks, or quotes.- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface where untrusted data could cause shell parsing errors or command substitution. It provides a defensive pattern using temporary files and strict boundary markers (quoted heredoc delimiters) to ensure the content is treated as literal data by the shell.
Audit Metadata