daily-briefing
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill fetches and summarizes untrusted external content from GitHub issues, pull requests, and discussions, which presents a surface for indirect prompt injection where malicious instructions embedded in that data could influence the agent's behavior during report generation or subsequent tasks.
- Ingestion points: The skill pulls data from GitHub activity streams, including user-authored comments and descriptions across multiple repositories.
- Boundary markers: External data is placed within Markdown and HTML tables, but no explicit instructions are provided to the agent to treat this data as untrusted or to ignore embedded instructions.
- Capability inventory: The skill has the ability to write files to the workspace (.md and .html) and perform network requests through the GitHub API tools.
- Sanitization: There is no mention of sanitizing or escaping the fetched content before it is interpolated into the final output documents, which also increases the risk of cross-site scripting (XSS) in the generated HTML.
Audit Metadata