improve-pipeline
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to manage issues and labels within thechrislacey89/skillsrepository. It performs read operations to search for existing issues and write operations to file new proposals and create tracking labels. - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub services via the CLI and utilizes a local
/librarycommand to query and load software engineering principles from a local index. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface (Category 8) because it ingests data describing 'field incidents' from external projects and repositories. This potential risk is addressed through structured reasoning and manual verification.
- Ingestion points: In
SKILL.md(Phase 1), the agent captures incident details from arbitrary repositories, PRs, and execution logs. - Boundary markers: The skill does not explicitly use delimiters or instructions to disregard potential commands embedded within incident data.
- Capability inventory: The skill has the capability to create GitHub issues and labels (Phase 5) and can perform file-system modifications in the target repository if the user approves the follow-on implementation (Phase 7).
- Sanitization: There is no automated sanitization or filtering performed on the external incident descriptions before they are processed by the reasoning agents.
Audit Metadata