reproduce
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill extracts information from GitHub issues and user comments to drive its reproduction steps. Because this data comes from external sources, it represents a potential surface for indirect prompt injection. The skill includes instructions to prioritize the issue as the source of truth to mitigate this.
- [Containerized Shell Operations]: Extensive use of shell commands like
npm install,git clone, andwrangler deployoccurs within a container environment. These operations are necessary for scaffolding and testing projects but involve executing code and managing dependencies from external registries. - [Automated Cloud Deployment]: The skill leverages temporary account flows to deploy reproduction projects to cloud infrastructure. This involves network activity and the creation of ephemeral live URLs to demonstrate findings.
- [GitHub API Interaction]: The skill interacts with the GitHub API to post comments and reactions. This functionality uses existing authentication to automate the reporting process.
Audit Metadata