plan
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ghCLI tool to retrieve data using user-supplied inputs (gh issue view $ARGUMENTS). - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as GitHub issues and project source code, creating a surface for indirect instructions to influence agent behavior.
- Ingestion points: Data retrieved via the
gh issue viewcommand and content read from project files (SKILL.md). - Boundary markers: Absent; the instructions do not define delimiters to separate external data from system instructions.
- Capability inventory: Execution of CLI tools, spawning of subagents for reasoning, and file system read access.
- Sanitization: Absent; no validation or filtering of content from fetched issues or code is specified.
Audit Metadata