pre-merge
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted input from GitHub issues and PR diffs, creating a surface for indirect prompt injection.
- Ingestion points: GitHub issue bodies are fetched using
gh issue viewand pull request diffs usinggh pr diff(SKILL.md, Phase 1). - Boundary markers: The skill does not implement explicit boundary markers or instructions to ignore embedded directives when processing external content.
- Capability inventory: The skill has the capability to create and edit pull requests and execute various shell commands via the GitHub CLI.
- Sanitization: There is no evidence of explicit validation or sanitization of the content retrieved from GitHub before it is processed by the agent.
Audit Metadata